Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:1659
HistoryApr 05, 2023 - 1:16 p.m.

(RHSA-2023:1659) Important: kpatch-patch security update

2023-04-0513:16:52
access.redhat.com
8
rhsa-2023-1659
kernel
stack overflow
do_proc_dointvec
proc_skip_spaces
cve-2022-4378
alsa
pcm
rwsem lock
uaf
cve-2023-0266
fuse filesystem
low-privileged user
privileges escalation
cve-2023-0386
kpatch
mm/mremap.c
incomplete fix
cve-2022-41222
cve-2023-1476

0.001 Low

EPSS

Percentile

41.4%

JSON

This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.

Security Fix(es):

  • kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)

  • ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266)

  • kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386)

  • kpatch: mm/mremap.c: incomplete fix for CVE-2022-41222 (CVE-2023-1476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64kpatch-patch-4_18_0-425_13_1< 1-2.el8_7kpatch-patch-4_18_0-425_13_1-1-2.el8_7.x86_64.rpm
RedHat8x86_64kpatch-patch-4_18_0-425_13_1-debugsource< 1-2.el8_7kpatch-patch-4_18_0-425_13_1-debugsource-1-2.el8_7.x86_64.rpm
RedHat8x86_64kpatch-patch-4_18_0-425_10_1-debugsource< 1-4.el8_7kpatch-patch-4_18_0-425_10_1-debugsource-1-4.el8_7.x86_64.rpm
RedHat8ppc64lekpatch-patch-4_18_0-425_10_1-debugsource< 1-4.el8_7kpatch-patch-4_18_0-425_10_1-debugsource-1-4.el8_7.ppc64le.rpm
RedHat8ppc64lekpatch-patch-4_18_0-425_3_1-debugsource< 1-6.el8kpatch-patch-4_18_0-425_3_1-debugsource-1-6.el8.ppc64le.rpm
RedHat8ppc64lekpatch-patch-4_18_0-425_13_1< 1-2.el8_7kpatch-patch-4_18_0-425_13_1-1-2.el8_7.ppc64le.rpm
RedHat8x86_64kpatch-patch-4_18_0-425_13_1-debuginfo< 1-2.el8_7kpatch-patch-4_18_0-425_13_1-debuginfo-1-2.el8_7.x86_64.rpm
RedHat8x86_64kpatch-patch-4_18_0-425_3_1-debugsource< 1-6.el8kpatch-patch-4_18_0-425_3_1-debugsource-1-6.el8.x86_64.rpm
RedHat8x86_64kpatch-patch-4_18_0-425_10_1-debuginfo< 1-4.el8_7kpatch-patch-4_18_0-425_10_1-debuginfo-1-4.el8_7.x86_64.rpm
RedHat8ppc64lekpatch-patch-4_18_0-425_3_1-debuginfo< 1-6.el8kpatch-patch-4_18_0-425_3_1-debuginfo-1-6.el8.ppc64le.rpm
Rows per page:
1-10 of 181

Related

nessus 69
rocky 3
almalinux 4
osv 11
cvelist 5
redhat 37
oraclelinux 10
cve 5
redhatcve 6
redos 1
cbl_mariner 9
veracode 2
nvd 5
debiancve 4
ubuntucve 4
prion 5
ibm 1
githubexploit 10
attackerkb 1
ubuntu 2
cisa_kev 1
f5 2
openvas 2
nessus
nessus
AlmaLinux 8 : kpatch-patch (ALSA-2023:1659)
2023-04-07 00:00:00
RHEL 8 : kpatch-patch (RHSA-2023:1659)
2023-04-05 00:00:00
RHEL 8 : kernel (RHSA-2023:1566)
2023-04-05 00:00:00
rocky
rocky
kernel security, bug fix, and enhancement update
2023-04-06 15:52:32
kernel-rt security and bug fix update
2023-04-26 15:28:18
kernel security, bug fix, and enhancement update
2023-05-05 15:42:05
almalinux
almalinux
Important: kernel-rt security and bug fix update
2023-04-04 00:00:00
Important: kernel security, bug fix, and enhancement update
2023-04-04 00:00:00
Important: kernel security and bug fix update
2023-04-11 00:00:00
osv
osv
Important: kernel-rt security and bug fix update
2023-04-26 15:28:18
Important: kernel security, bug fix, and enhancement update
2023-05-05 15:42:05
Important: kernel-rt security and bug fix update
2023-04-04 00:00:00
cvelist
cvelist
CVE-2023-1476 Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222
2023-11-03 08:07:00
CVE-2022-41222
2022-09-21 00:00:00
CVE-2023-0266 Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel
2023-01-30 13:09:32
redhat
redhat
(RHSA-2023:1584) Important: kernel-rt security and bug fix update
2023-04-04 08:51:55
(RHSA-2023:1566) Important: kernel security, bug fix, and enhancement update
2023-04-04 08:50:59
(RHSA-2023:1660) Important: kpatch-patch security update
2023-04-05 13:21:26
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2023-04-05 00:00:00
Unbreakable Enterprise kernel security update
2022-12-12 00:00:00
kernel security and bug fix update
2023-04-12 00:00:00
cve
cve
CVE-2023-1476
2023-11-03 09:15:13
CVE-2022-41222
2022-09-21 08:15:09
CVE-2023-0386
2023-03-22 21:15:18
redhatcve
redhatcve
CVE-2023-1476
2023-03-17 16:42:59
CVE-2022-41222
2022-10-31 12:12:04
CVE-2023-0266
2023-01-23 11:07:23
redos
redos
ROS-20230915-10
2023-09-15 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-41222 affecting package kernel 5.10.134.1-2
2022-10-04 07:51:40
CVE-2023-0266 affecting package kernel for versions less than 5.15.92.1-1
2023-02-14 20:21:22
CVE-2023-0266 affecting package hyperv-daemons for versions less than 5.15.92.1-1
2023-02-14 20:21:22
veracode
veracode
Use After Free
2022-11-19 14:29:00
Privilege Escalation
2023-03-06 20:47:17
nvd
nvd
CVE-2022-41222
2022-09-21 08:15:09
CVE-2023-1476
2023-11-03 09:15:13
CVE-2022-4378
2023-01-05 16:15:11
debiancve
debiancve
CVE-2022-41222
2022-09-21 08:15:09
CVE-2023-0266
2023-01-30 14:15:10
CVE-2022-4378
2023-01-05 16:15:11
ubuntucve
ubuntucve
CVE-2022-41222
2022-09-21 00:00:00
CVE-2022-4378
2023-01-05 00:00:00
CVE-2023-0386
2023-03-22 00:00:00
prion
prion
Design/Logic Flaw
2022-09-21 08:15:00
Race condition
2023-11-03 09:15:00
Design/Logic Flaw
2023-01-30 14:15:00
ibm
ibm
Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-1280, CVE-2023-0386, CVE-2022-4269, CVE-2022-2873, CVE-2022-4378)
2023-06-16 19:23:44
githubexploit
githubexploit
Exploit for Improper Ownership Management in Linux Linux Kernel
2023-12-23 11:01:55
Exploit for Improper Ownership Management in Linux Linux Kernel
2023-05-06 06:07:23
Exploit for Improper Ownership Management in Linux Linux Kernel
2023-05-04 11:55:43
attackerkb
attackerkb
CVE-2023-0266
2023-01-30 00:00:00
ubuntu
ubuntu
Linux kernel (OEM) vulnerability
2023-01-11 00:00:00
Kernel Live Patch Security Notice
2023-02-14 00:00:00
cisa_kev
cisa_kev
Linux Kernel Use-After-Free Vulnerability
2023-03-30 00:00:00
f5
f5
K000133644 : Linux kernel vulnerability CVE-2023-0266
2023-04-24 00:00:00
K000134768 : Linux kernel vulnerability CVE-2022-4378
2023-05-25 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5799-1)
2023-01-11 00:00:00
Ubuntu: Security Advisory (USN-6043-1)
2023-04-27 00:00:00

0.001 Low

EPSS

Percentile

41.4%

JSON
Related for RHSA-2023:1659
nessus69rocky3almalinux4osv11cvelist5redhat37oraclelinux10cve5redhatcve6redos1cbl_mariner9veracode2nvd5debiancve4ubuntucve4prion5ibm1githubexploit10attackerkb1ubuntu2cisa_kev1f52openvas2