Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 6

• High 7.8
  CVE-2024-1086 Exploited · Ransomware Public exploit EPSS 28%

  Use-after-free in Linux kernel's netfilter: nf_tables component

  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slo…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jan 31, 2024

  KEV May 30, 2024
• High 7.8
  CVE-2023-4244

  Use-after-free in Linux kernel's netfilter: nf_tables component

  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Due to a race condition between nf_tables netlink control plane transaction and nft_set element garbage collection, it …

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 6, 2023
• High 7.8
  CVE-2023-52628

  netfilter: nftables: exthdr: fix 4-byte stack OOB write

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: exthdr: fix 4-byte stack OOB write If priv->len is a multiple of 4, then dst[len / 4] can write past the destination array which leads to stack corruption. This construct…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 28, 2024
• High 7.8
  CVE-2023-6817

  Use-after-free in Linux kernel's netfilter: nf_tables component

  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PI…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 18, 2023
• High 7.8
  CVE-2024-26586

  mlxsw: spectrum_acl_tcam: Fix stack corruption

  In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group in the device. The group contains a lis…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 22, 2024
• Medium 6.5
  CVE-2023-6240

  Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation

  A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Feb 4, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2235306
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2250843
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2255139
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2262126
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2265645
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2272041
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3414.json
• report
  https://access.redhat.com/security/cve/CVE-2023-4244
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-4244
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-4244
• article
  https://lore.kernel.org/netdev/20230810070830.24064-1-pablo@netfilter.org/
• article
  https://lore.kernel.org/netdev/20230815223011.7019-1-fw@strlen.de/
• report
  https://access.redhat.com/security/cve/CVE-2023-6240
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6240
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6240
• article
  https://people.redhat.com/~hkario/marvin/
• article
  https://securitypitfalls.wordpress.com/2023/10/16/experiment-with-side-channel-attacks-yourself/
• report
  https://access.redhat.com/security/cve/CVE-2023-6817
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6817
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6817
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=317eb9685095678f2c9f5a8189de698c5354316a
• report
  https://access.redhat.com/security/cve/CVE-2023-52628
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52628
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52628
• article
  https://lore.kernel.org/linux-cve-announce/2024032850-CVE-2023-52628-14fb@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-1086
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-1086
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-1086
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660
• article
  https://kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2024-26586
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26586
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26586
• article
  https://lore.kernel.org/linux-cve-announce/2024022253-CVE-2024-26586-6632@gregkh/T/#u