Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:0856
HistoryFeb 21, 2023 - 9:57 a.m.

(RHSA-2023:0856) Important: kernel security update

2023-02-2109:57:02
CWE-120->CWE-131->CWE-787
access.redhat.com
67
kernel
security update
memory corruption
use-after-free
stack overflow
cve-2022-2964
cve-2022-3564
cve-2022-4378
references
unix

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.9%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)

  • kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)

  • kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected configurations

Vulners
Node
redhatkernel-rtRange≤3.10.0-1160.95.1.rt56.1241.el7
OR
redhatkernelRange≤3.10.0-1160.95.1.el7
OR
redhatkernelRange≤3.10.0-693.111.1.el7
OR
redhatkernelRange≤3.10.0-957.104.1.el7
OR
redhatkernelRange≤3.10.0-1062.72.1.el7
OR
redhatkernel-rtRange≤4.18.0-477.10.1.rt7.274.el8_8
OR
redhatkernelRange≤4.18.0-477.10.1.el8_8
OR
redhatkernelRange≤4.18.0-147.80.1.el8_1
OR
redhatkernelRange≤4.18.0-193.105.1.el8_2
OR
redhatkernel-rtRange≤4.18.0-193.105.1.rt13.156.el8_2
OR
redhatkernel-rtRange≤4.18.0-305.82.1.rt7.154.el8_4
OR
redhatkernelRange≤4.18.0-305.82.1.el8_4
OR
redhatkernelRange≤4.18.0-372.57.1.el8_6
OR
redhatkernelRange≤5.14.0-162.18.1.el9_1
OR
redhatkernel-rtRange≤5.14.0-162.18.1.rt21.181.el9_1
OR
redhatkernelRange≤5.14.0-70.49.1.el9_0
OR
redhatkernel-rtRange≤5.14.0-70.49.1.rt21.120.el9_0
OR
redhatvirtualization_hostRange≤4.5.3-202306050942_8.6
OR
redhatkernel-rtRange≤3.10.0-1160.83.1.rt56.1228.el7
OR
redhatkernelRange≤3.10.0-1160.83.1.el7
OR
redhatkernel-rtRange≤4.18.0-425.10.1.rt7.220.el8_7
OR
redhatkernelRange≤4.18.0-425.10.1.el8_7
OR
redhatkernelRange≤4.18.0-193.98.1.el8_2
OR
redhatkernel-rtRange≤4.18.0-193.98.1.rt13.149.el8_2
OR
redhatkernel-rtRange≤4.18.0-305.76.1.rt7.148.el8_4
OR
redhatkernelRange≤4.18.0-305.76.1.el8_4
OR
redhatkernelRange≤4.18.0-372.46.1.el8_6
OR
redhatkernelRange≤5.14.0-162.12.1.el9_1
OR
redhatkernel-rtRange≤5.14.0-162.12.1.rt21.175.el9_1
OR
redhatkernelRange≤5.14.0-70.43.1.el9_0
OR
redhatkernel-rtRange≤5.14.0-70.43.1.rt21.114.el9_0
OR
redhatkernelRange≤2.6.32-754.50.1.el6
OR
redhatkernel-rtRange≤3.10.0-1160.88.1.rt56.1233.el7
OR
redhatkernelRange≤3.10.0-1160.88.1.el7
OR
redhatkernelRange≤3.10.0-693.107.1.el7
OR
redhatkernelRange≤3.10.0-957.100.1.el7
OR
redhatkernelRange≤3.10.0-1062.71.1.el7
OR
redhatkernel-rtRange≤4.18.0-425.19.2.rt7.230.el8_7
OR
redhatkernelRange≤4.18.0-425.19.2.el8_7
OR
redhatkernelRange≤4.18.0-193.100.1.el8_2
OR
redhatkernel-rtRange≤4.18.0-193.100.1.rt13.151.el8_2
AND
redhatenterprise_linuxMatch7
OR
redhatenterprise_linuxMatchnfv
OR
redhatenterprise_linuxMatch8
OR
redhatenterprise_linuxMatch9
VendorProductVersionCPE
redhatkernel-rt*cpe:2.3:o:redhat:kernel-rt:*:*:*:*:*:*:*:*
redhatkernel*cpe:2.3:a:redhat:kernel:*:*:*:*:*:*:*:*
redhatvirtualization_host*cpe:2.3:a:redhat:virtualization_host:*:*:*:*:*:*:*:*
redhatenterprise_linux7cpe:2.3:o:redhat:enterprise_linux:7:*:*:*:*:*:*:*
redhatenterprise_linuxnfvcpe:2.3:o:redhat:enterprise_linux:nfv:*:*:*:*:*:*:*
redhatenterprise_linux8cpe:2.3:o:redhat:enterprise_linux:8:*:*:*:*:*:*:*
redhatenterprise_linux9cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*

Related

nessus 67
redhat 37
osv 44
rocky 2
almalinux 3
redhatcve 2
ubuntucve 3
oraclelinux 11
nvd 4
debiancve 3
cbl_mariner 1
ubuntu 1
f5 3
cve 3
prion 3
openvas 2
cvelist 3
centos 1
githubexploit 2
veracode 2
virtuozzo 1
ibm 1
nessus
nessus
RHEL 8 : kernel (RHSA-2023:0856)
2023-02-21 00:00:00
RHEL 8 : kpatch-patch (RHSA-2023:0858)
2023-02-21 00:00:00
RHEL 8 : kpatch-patch (RHSA-2023:3431)
2023-06-06 00:00:00
redhat
redhat
(RHSA-2023:0858) Important: kpatch-patch security update
2023-02-21 09:57:04
(RHSA-2023:1251) Important: kpatch-patch security update
2023-03-15 09:42:22
(RHSA-2023:3431) Important: kpatch-patch security update
2023-06-05 07:59:21
osv
osv
Red Hat Security Advisory: kpatch-patch security update
2024-09-13 23:24:35
Red Hat Security Advisory: kernel security update
2024-09-13 23:24:13
Red Hat Security Advisory: kpatch-patch security update
2024-09-13 21:12:51
rocky
rocky
kernel-rt security and bug fix update
2023-03-02 01:17:39
kernel security and bug fix update
2023-04-06 15:54:58
almalinux
almalinux
Important: kernel security and bug fix update
2023-02-28 00:00:00
Important: kernel-rt security and bug fix update
2023-02-28 00:00:00
Important: kernel-rt security and bug fix update
2023-01-12 00:00:00
redhatcve
redhatcve
CVE-2022-4378
2022-12-12 13:04:58
CVE-2022-2964
2022-08-23 14:40:10
ubuntucve
ubuntucve
CVE-2022-4378
2023-01-05 00:00:00
CVE-2022-3564
2022-10-17 00:00:00
CVE-2022-2964
2022-09-09 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2022-12-12 00:00:00
Unbreakable Enterprise kernel-container security update
2023-01-09 00:00:00
kernel security update
2023-08-11 00:00:00
nvd
nvd
CVE-2022-4378
2023-01-05 16:15:11
CVE-2022-3564
2022-10-17 19:15:10
CVE-2022-2964
2022-09-09 15:15:10
debiancve
debiancve
CVE-2022-4378
2023-01-05 16:15:11
CVE-2022-3564
2022-10-17 19:15:10
CVE-2022-2964
2022-09-09 15:15:10
cbl_mariner
cbl_mariner
CVE-2022-4378 affecting package kernel 5.10.161.1-1
2023-01-29 21:02:07
ubuntu
ubuntu
Linux kernel (OEM) vulnerability
2023-01-11 00:00:00
f5
f5
K000134670 : Linux kernel vulnerability CVE-2022-2964
2023-05-18 00:00:00
K000134768 : Linux kernel vulnerability CVE-2022-4378
2023-05-25 00:00:00
K000137186 : Linux kernel vulnerability CVE-2022-3564
2023-10-09 00:00:00
cve
cve
CVE-2022-2964
2022-09-09 15:15:10
CVE-2022-4378
2023-01-05 16:15:11
CVE-2022-3564
2022-10-17 19:15:10
prion
prion
Stack overflow
2023-01-05 16:15:00
Design/Logic Flaw
2022-10-17 19:15:00
Out-of-bounds
2022-09-09 15:15:00
openvas
openvas
Ubuntu: Security Advisory (USN-5799-1)
2023-01-11 00:00:00
CentOS: Security Advisory for bpftool (CESA-2023:4151)
2023-08-04 00:00:00
cvelist
cvelist
CVE-2022-4378
2023-01-05 00:00:00
CVE-2022-3564 Linux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after free
2022-10-17 00:00:00
CVE-2022-2964
2022-09-09 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2023-08-03 14:33:32
githubexploit
githubexploit
Exploit for Race Condition in Linux Linux Kernel
2023-09-15 10:04:05
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Linux Kernel
2023-09-14 09:07:11
veracode
veracode
Denial Of Service (DoS)
2022-12-06 12:17:34
Denial Of Service (DoS)
2023-02-03 22:17:08
virtuozzo
virtuozzo
[Important] [Security] Virtuozzo ReadyKernel Patch 155.1 for Virtuozzo Hybrid Server 7.5
2023-03-27 00:00:00
ibm
ibm
Security Bulletin: Multiple Linux Kernel vulnerabilities may affect IBM Elastic Storage System
2023-08-11 07:13:16

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.9%

JSON
Related for RHSA-2023:0856
nessus67redhat37osv44rocky2almalinux3redhatcve2ubuntucve3oraclelinux11nvd4debiancve3cbl_mariner1ubuntu1f53cve3prion3openvas2cvelist3centos1githubexploit2veracode2virtuozzo1ibm1