Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:0399
HistoryJan 24, 2023 - 9:46 a.m.

(RHSA-2023:0399) Important: kernel security and bug fix update

2023-01-2409:46:52
access.redhat.com
195

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)

  • hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715 (CVE-2021-26401)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Prevent unnecessary resets - Avoid leaving shost->last_reset with stale value if EH does not run (BZ#2128337)

  • i40e: Request to backport upstream commit 2e5a20573a92 (BZ#2129248)

  • disable VMA-based swap-in readahead on PowerPC (BZ#2142455)

OSVersionArchitecturePackageVersionFilename
RedHat7s390xkernel-headers< 3.10.0-1160.83.1.el7kernel-headers-3.10.0-1160.83.1.el7.s390x.rpm
RedHat7ppc64lekernel-tools< 3.10.0-1160.83.1.el7kernel-tools-3.10.0-1160.83.1.el7.ppc64le.rpm
RedHat7s390xkernel-devel< 3.10.0-1160.83.1.el7kernel-devel-3.10.0-1160.83.1.el7.s390x.rpm
RedHat7ppc64leperf< 3.10.0-1160.83.1.el7perf-3.10.0-1160.83.1.el7.ppc64le.rpm
RedHat7s390xperf< 3.10.0-1160.83.1.el7perf-3.10.0-1160.83.1.el7.s390x.rpm
RedHat7s390xkernel-kdump< 3.10.0-1160.83.1.el7kernel-kdump-3.10.0-1160.83.1.el7.s390x.rpm
RedHat7ppc64leperf-debuginfo< 3.10.0-1160.83.1.el7perf-debuginfo-3.10.0-1160.83.1.el7.ppc64le.rpm
RedHat7ppc64lekernel-tools-libs< 3.10.0-1160.83.1.el7kernel-tools-libs-3.10.0-1160.83.1.el7.ppc64le.rpm
RedHat7ppc64kernel-debug-devel< 3.10.0-1160.83.1.el7kernel-debug-devel-3.10.0-1160.83.1.el7.ppc64.rpm
RedHat7x86_64kernel-tools-libs-devel< 3.10.0-1160.83.1.el7kernel-tools-libs-devel-3.10.0-1160.83.1.el7.x86_64.rpm
Rows per page:
1-10 of 751

Related

nessus 88
openvas 35
centos 6
redhat 18
rosalinux 1
oraclelinux 8
prion 2
f5 2
ubuntucve 2
amd 1
debiancve 2
cve 2
redhatcve 2
veracode 2
citrix 1
threatpost 2
suse 11
debian 3
amazon 2
mageia 1
ubuntu 3
virtuozzo 1
slackware 1
paloalto 1
cloudfoundry 1
osv 1
nessus
nessus
RHEL 7 : kernel (RHSA-2023:0399)
2023-01-24 00:00:00
RHEL 7 : kernel-rt (RHSA-2023:0400)
2023-01-24 00:00:00
Scientific Linux Security Update : kernel on SL7.x x86_64 (2023:0399)
2023-01-25 00:00:00
openvas
openvas
CentOS: Security Advisory for bpftool (CESA-2023:0399)
2023-01-31 00:00:00
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2018-1015)
2020-01-23 00:00:00
Spectre Variant 2 (CVE 2017-5715) Branch Target Injection Update Disable (KB4078130)
2018-01-29 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2023-01-30 16:50:20
microcode_ctl security update
2018-01-04 11:40:52
libvirt security update
2018-01-04 19:54:04
redhat
redhat
(RHSA-2023:0400) Important: kernel-rt security and bug fix update
2023-01-24 09:46:52
(RHSA-2023:0187) Moderate: kernel security update
2023-01-17 08:48:58
(RHSA-2023:0404) Important: kpatch-patch security update
2023-01-24 09:46:56
rosalinux
rosalinux
Advisory ROSA-SA-2023-2097
2023-02-07 10:10:41
oraclelinux
oraclelinux
kernel security and bug fix update
2023-01-25 00:00:00
kernel security update
2023-10-20 00:00:00
qemu-kvm security update
2018-01-04 00:00:00
prion
prion
Design/Logic Flaw
2022-03-11 18:15:00
Out-of-bounds
2022-09-09 15:15:00
f5
f5
K000137188 : AMD CPU vulnerability CVE-2021-26401
2023-10-09 00:00:00
K000134670 : Linux kernel vulnerability CVE-2022-2964
2023-05-18 00:00:00
ubuntucve
ubuntucve
CVE-2021-26401
2022-03-11 00:00:00
CVE-2022-2964
2022-09-09 00:00:00
amd
amd
LFENCE/JMP Mitigation Update for CVE-2017-5715
2022-03-08 00:00:00
debiancve
debiancve
CVE-2021-26401
2022-03-11 18:15:00
CVE-2022-2964
2022-09-09 15:15:00
cve
cve
CVE-2021-26401
2022-03-11 18:15:00
CVE-2022-2964
2022-09-09 15:15:00
redhatcve
redhatcve
CVE-2021-26401
2022-03-09 10:23:54
CVE-2022-2964
2022-08-23 14:40:10
veracode
veracode
Information Disclosure
2022-06-23 22:13:13
Denial Of Service (DoS)
2023-02-03 22:17:08
citrix
citrix
Citrix Hypervisor Security Update
2022-03-07 14:55:18
threatpost
threatpost
New Spectre-Level Flaw Targets Return Stack Buffer
2018-07-23 18:27:20
Intel Halts Spectre Fixes On Older Chips, Citing Limited Ecosystem Support
2018-04-04 15:18:47
suse
suse
Security update for ucode-intel (important)
2018-01-04 03:07:17
Security update for kernel-firmware (important)
2018-01-04 03:08:16
Security update for microcode_ctl (important)
2018-01-11 18:09:53
debian
debian
[SECURITY] [DLA 1362-1] gcc-4.9-backport new package
2018-04-25 16:19:40
[SECURITY] [DLA 1349-1] linux-tools security update
2018-04-16 22:31:08
[SECURITY] [DSA 4179-1] linux-tools security update
2018-04-24 13:15:06
amazon
amazon
Important: linux-firmware
2018-02-20 21:46:00
Important: qemu-kvm
2018-02-07 18:49:00
mageia
mageia
Updated microcode packages fix security vulnerability
2018-05-29 22:41:14
ubuntu
ubuntu
libvirt update
2018-02-07 00:00:00
intel-microcode update
2018-03-29 00:00:00
Intel Microcode update
2018-01-11 00:00:00
virtuozzo
virtuozzo
Kernel update: new kernel 3.10.0-693.21.1.vz7.46.7, Virtuozzo 7.0 Update 7 Hotfix 2 (7.0.7-453)
2018-04-28 00:00:00
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2018-02-07 06:34:12
paloalto
paloalto
Meltdown and Spectre update for WildFire-500 Appliance
2018-05-15 21:35:00
cloudfoundry
cloudfoundry
USN-3690-2: AMD Microcode regression | Cloud Foundry
2018-07-19 00:00:00
osv
osv
CVE-2017-5715
2018-01-04 13:29:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%

JSON
Related for RHSA-2023:0399
nessus88openvas35centos6redhat18rosalinux1oraclelinux8prion2f52ubuntucve2amd1debiancve2cve2redhatcve2veracode2citrix1threatpost2suse11debian3amazon2mageia1ubuntu3virtuozzo1slackware1paloalto1cloudfoundry1osv1