Lucene search

K
redhatRedHatRHSA-2023:3465
HistoryJun 06, 2023 - 8:02 a.m.

(RHSA-2023:3465) Important: kernel security and bug fix update

2023-06-0608:02:40
access.redhat.com
14
linux kernel
security fix
local privilege escalation
netfilter nf_tables
bug fix
intel qat
performance drop
fips
azure rhel9 backport
kvm
task deadline_test issue

0.001 Low

EPSS

Percentile

39.6%

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)

  • kernel: udmabuf: improper validation of array index leading to local privilege escalation (CVE-2023-2008)

  • kernel: use-after-free in Netfilter nf_tables when processing batch requests can lead to privilege escalation (CVE-2023-32233)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Intel QAT Update - (kernel changes) (BZ#2176848)

  • Significant performance drop for getrandom system call when FIPS is enabled (compared to RHEL 8) (BZ#2183477)

  • Azure RHEL9 Backport upstream commit 93827a0a36396f2fd6368a54a020f420c8916e9b [KVM: VMX: Fix crash due to uninitialized current_vmcs] (BZ#2186824)

  • kernel[-rt]: task deadline_test:1778 blocked for more than 622 seconds (BZ#2188657)