ALSA-2024:0897

Dashboard / Vulnerabilities / ALSA-2024:0897

ALSA-2024:0897

Summary: Important: kernel security update

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: sch_hfsc UAF (CVE-2023-4623) * kernel: use-after-free in sch_qfq network scheduler (CVE-2023-4921) * kernel: inactive elements in nft_pipapo_walk (CVE-2023-6817) * kernel: IGB driver inadequate buffer size for frames larger than MTU (CVE-2023-45871) * kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination (CVE-2024-0646) * kernel: nfp: use-after-free in area_cache_get() (CVE-2022-3545) * kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip (CVE-2022-41858) * kernel: HID: check empty report_list in hid_validate_values() (CVE-2023-1073) * kernel: Possible use-after-free since the two fdget() during vhost_net_set_backend() (CVE-2023-1838) * kernel: NULL pointer dereference in can_rcv_filter (CVE-2023-2166) * kernel: Slab-out-of-bound read in compare_netdev_and_ip (CVE-2023-2176) * kernel: A heap out-of-bounds write when function perf_read_group is called and sibling_list is smaller than its child's sibling_list (CVE-2023-5717) * kernel: NULL pointer dereference in nvmet_tcp_build_iovec (CVE-2023-6356) * kernel: NULL pointer dereference in nvmet_tcp_execute_request (CVE-2023-6535) * kernel: NULL pointer dereference in __nvmet_req_complete (CVE-2023-6536) * kernel: Out-Of-Bounds Read vulnerability in smbCalcSize (CVE-2023-6606) * kernel: OOB Access in smb2_dump_detail (CVE-2023-6610) * kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283) * kernel: SEV-ES local priv escalation (CVE-2023-46813) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://access.redhat.com/errata/RHSA-2024:0897, https://access.redhat.com/security/cve/CVE-2022-3545, https://access.redhat.com/security/cve/CVE-2022-41858, https://access.redhat.com/security/cve/CVE-2023-1073, https://access.redhat.com/security/cve/CVE-2023-1838, https://access.redhat.com/security/cve/CVE-2023-2166, https://access.redhat.com/security/cve/CVE-2023-2176, https://access.redhat.com/security/cve/CVE-2023-40283, https://access.redhat.com/security/cve/CVE-2023-45871, https://access.redhat.com/security/cve/CVE-2023-4623, https://access.redhat.com/security/cve/CVE-2023-46813, https://access.redhat.com/security/cve/CVE-2023-4921, https://access.redhat.com/security/cve/CVE-2023-5717, https://access.redhat.com/security/cve/CVE-2023-6356, https://access.redhat.com/security/cve/CVE-2023-6535, https://access.redhat.com/security/cve/CVE-2023-6536, https://access.redhat.com/security/cve/CVE-2023-6606, https://access.redhat.com/security/cve/CVE-2023-6610, https://access.redhat.com/security/cve/CVE-2023-6817, https://access.redhat.com/security/cve/CVE-2024-0646, https://bugzilla.redhat.com/2087568, https://bugzilla.redhat.com/2144379, https://bugzilla.redhat.com/2161310, https://bugzilla.redhat.com/2173403, https://bugzilla.redhat.com/2187813, https://bugzilla.redhat.com/2187931, https://bugzilla.redhat.com/2231800, https://bugzilla.redhat.com/2237757, https://bugzilla.redhat.com/2244723, https://bugzilla.redhat.com/2245514, https://bugzilla.redhat.com/2246944, https://bugzilla.redhat.com/2246945, https://bugzilla.redhat.com/2253611, https://bugzilla.redhat.com/2253614, https://bugzilla.redhat.com/2253908, https://bugzilla.redhat.com/2254052, https://bugzilla.redhat.com/2254053, https://bugzilla.redhat.com/2254054, https://bugzilla.redhat.com/2255139, https://errata.almalinux.org/8/ALSA-2024-0897.html