Headline
Red Hat Security Advisory 2023-1970-01
Red Hat Security Advisory 2023-1970-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
====================================================================
Red Hat Security Advisory
Synopsis: Important: kernel security and bug fix update
Advisory ID: RHSA-2023:1970-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2023:1970
Issue date: 2023-04-25
CVE Names: CVE-2023-0386
====================================================================
- Summary:
An update for kernel is now available for Red Hat Enterprise Linux 9.0
Extended Update Support.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat CodeReady Linux Builder EUS (v.9.0) - aarch64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux AppStream EUS (v.9.0) - aarch64, noarch, ppc64le, s390x, x86_64
Red Hat Enterprise Linux BaseOS EUS (v.9.0) - aarch64, noarch, ppc64le, s390x, x86_64
- Description:
The kernel packages contain the Linux kernel, the core of any Linux
operating system.
Security Fix(es):
- kernel: FUSE filesystem low-privileged user privileges escalation
(CVE-2023-0386)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Bug Fix(es):
RHEL9.0 64TB/240c Denali: “vmcore failed, _exitcode:139” error observed
while capturing vmcore during fadump after memory remove. Incomplete vmcore
is captured. (BZ#2151214)Support cpuset.sched_load_balance by changing default CPUset directory
structure. (BZ#2161106)CSB.V bit never becomes valid for NX Gzip job during LPAR migration.
(BZ#2166251)Update intel_idle for Eaglestream/Sapphire Rapids support. (BZ#2168359)
An application stopped on robust futex used via pthread_mutex_lock().
(BZ#2168837)FVTR1020:Rainier:Non-HMC:MPIPL Dump is not getting offloaded to Linux
partition. (BZ#2170853)update qla2xxx driver to latest upstream. (BZ#2171812)
MSFT MANA NET Patch RHEL-9: Fix accessing freed irq affinity_hint.
(BZ#2175254)In FIPS mode, kernel does not transition into error state when RCT or APT
health tests fail. (BZ#2181729)
- Solution:
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.
- Bugs fixed (https://bugzilla.redhat.com/):
2159505 - CVE-2023-0386 kernel: FUSE filesystem low-privileged user privileges escalation
- Package List:
Red Hat Enterprise Linux AppStream EUS (v.9.0):
aarch64:
bpftool-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debug-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debug-devel-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debug-devel-matched-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debuginfo-common-aarch64-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-devel-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-devel-matched-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-headers-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-tools-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
perf-5.14.0-70.53.1.el9_0.aarch64.rpm
perf-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
python3-perf-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
noarch:
kernel-doc-5.14.0-70.53.1.el9_0.noarch.rpm
ppc64le:
bpftool-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debug-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debug-devel-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debug-devel-matched-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debuginfo-common-ppc64le-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-devel-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-devel-matched-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-headers-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-tools-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
perf-5.14.0-70.53.1.el9_0.ppc64le.rpm
perf-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
python3-perf-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
s390x:
bpftool-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debug-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debug-devel-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debug-devel-matched-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debuginfo-common-s390x-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-devel-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-devel-matched-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-headers-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-tools-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-zfcpdump-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-zfcpdump-devel-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-zfcpdump-devel-matched-5.14.0-70.53.1.el9_0.s390x.rpm
perf-5.14.0-70.53.1.el9_0.s390x.rpm
perf-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
python3-perf-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
x86_64:
bpftool-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debug-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debug-devel-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debug-devel-matched-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debuginfo-common-x86_64-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-devel-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-devel-matched-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-headers-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-tools-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
perf-5.14.0-70.53.1.el9_0.x86_64.rpm
perf-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
python3-perf-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
Red Hat Enterprise Linux BaseOS EUS (v.9.0):
Source:
kernel-5.14.0-70.53.1.el9_0.src.rpm
aarch64:
bpftool-5.14.0-70.53.1.el9_0.aarch64.rpm
bpftool-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-core-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debug-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debug-core-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debug-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debug-modules-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debug-modules-extra-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debuginfo-common-aarch64-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-modules-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-modules-extra-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-tools-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-tools-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-tools-libs-5.14.0-70.53.1.el9_0.aarch64.rpm
perf-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
python3-perf-5.14.0-70.53.1.el9_0.aarch64.rpm
python3-perf-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
noarch:
kernel-abi-stablelists-5.14.0-70.53.1.el9_0.noarch.rpm
ppc64le:
bpftool-5.14.0-70.53.1.el9_0.ppc64le.rpm
bpftool-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-core-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debug-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debug-core-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debug-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debug-modules-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debug-modules-extra-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debuginfo-common-ppc64le-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-modules-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-modules-extra-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-tools-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-tools-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-tools-libs-5.14.0-70.53.1.el9_0.ppc64le.rpm
perf-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
python3-perf-5.14.0-70.53.1.el9_0.ppc64le.rpm
python3-perf-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
s390x:
bpftool-5.14.0-70.53.1.el9_0.s390x.rpm
bpftool-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-core-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debug-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debug-core-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debug-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debug-modules-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debug-modules-extra-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debuginfo-common-s390x-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-modules-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-modules-extra-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-tools-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-tools-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-zfcpdump-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-zfcpdump-core-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-zfcpdump-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-zfcpdump-modules-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-zfcpdump-modules-extra-5.14.0-70.53.1.el9_0.s390x.rpm
perf-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
python3-perf-5.14.0-70.53.1.el9_0.s390x.rpm
python3-perf-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
x86_64:
bpftool-5.14.0-70.53.1.el9_0.x86_64.rpm
bpftool-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-core-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debug-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debug-core-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debug-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debug-modules-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debug-modules-extra-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debuginfo-common-x86_64-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-modules-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-modules-extra-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-tools-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-tools-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-tools-libs-5.14.0-70.53.1.el9_0.x86_64.rpm
perf-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
python3-perf-5.14.0-70.53.1.el9_0.x86_64.rpm
python3-perf-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
Red Hat CodeReady Linux Builder EUS (v.9.0):
aarch64:
bpftool-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-cross-headers-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debug-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-debuginfo-common-aarch64-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-tools-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
kernel-tools-libs-devel-5.14.0-70.53.1.el9_0.aarch64.rpm
perf-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
python3-perf-debuginfo-5.14.0-70.53.1.el9_0.aarch64.rpm
ppc64le:
bpftool-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-cross-headers-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debug-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-debuginfo-common-ppc64le-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-tools-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
kernel-tools-libs-devel-5.14.0-70.53.1.el9_0.ppc64le.rpm
perf-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
python3-perf-debuginfo-5.14.0-70.53.1.el9_0.ppc64le.rpm
s390x:
bpftool-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-cross-headers-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debug-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-debuginfo-common-s390x-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-tools-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
kernel-zfcpdump-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
perf-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
python3-perf-debuginfo-5.14.0-70.53.1.el9_0.s390x.rpm
x86_64:
bpftool-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-cross-headers-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debug-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-debuginfo-common-x86_64-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-tools-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
kernel-tools-libs-devel-5.14.0-70.53.1.el9_0.x86_64.rpm
perf-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
python3-perf-debuginfo-5.14.0-70.53.1.el9_0.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2023-0386
https://access.redhat.com/security/updates/classification/#important
- Contact:
The Red Hat security contact is [email protected]. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2023 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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7+rr
-----END PGP SIGNATURE-----
–
RHSA-announce mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/rhsa-announce
Related news
A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system.
It was discovered that the OverlayFS implementation in the Linux kernel did not properly handle copy up operation in some conditions. A local attacker could possibly use this to gain elevated privileges. It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did not properly perform data buffer size validation in some situations. A physically proximate attacker could use this to craft a malicious USB device that when inserted, could cause a denial of service (system crash) or possibly expose sensitive information. It was discovered that a race condition existed in the io_uring subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. Various other issues were also addressed.
Ubuntu Security Notice 6072-1 - It was discovered that the Traffic-Control Index implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the TCINDEX classifier has been removed. Lin Ma discovered a race condition in the io_uring subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service.
Ubuntu Security Notice 6057-1 - It was discovered that the Traffic-Control Index implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the OverlayFS implementation in the Linux kernel did not properly handle copy up operation in some conditions. A local attacker could possibly use this to gain elevated privileges.
Red Hat Advanced Cluster Management for Kubernetes 2.6.5 General Availability release images, which fix bugs and security updates container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3841: A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as the console API endpoint is missing an authentication check, allowing unauth...
Red Hat Security Advisory 2023-1953-01 - Red Hat OpenShift Logging Subsystem 5.6.5 update. Issues addressed include cross site scripting and denial of service vulnerabilities.
Ubuntu Security Notice 6040-1 - It was discovered that the Traffic-Control Index implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the OverlayFS implementation in the Linux kernel did not properly handle copy up operation in some conditions. A local attacker could possibly use this to gain elevated privileges.
An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-0386: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on t...
Red Hat Security Advisory 2023-1677-01 - The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. The ovirt-node-ng packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. Issues addressed include heap overflow and integer overflow vulnerabilities.
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-0386: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
An update for kernel-rt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-0386: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
Red Hat Security Advisory 2023-1660-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4378: A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system. * CVE-2023-0266: A use-after-free flaw was found in snd_ctl_elem_read in sound/core/control.c in Advanced Linux So...
Red Hat Security Advisory 2023-1554-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system.
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of se...
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.