Headline
RHSA-2023:1691: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Related CVEs:
- CVE-2023-0386: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
Skip to navigation Skip to main content
Utilities
- Subscriptions
- Downloads
- Containers
- Support Cases
Infrastructure and Management
- Red Hat Enterprise Linux
- Red Hat Virtualization
- Red Hat Identity Management
- Red Hat Directory Server
- Red Hat Certificate System
- Red Hat Satellite
- Red Hat Subscription Management
- Red Hat Update Infrastructure
- Red Hat Insights
- Red Hat Ansible Automation Platform
Cloud Computing
- Red Hat OpenShift
- Red Hat CloudForms
- Red Hat OpenStack Platform
- Red Hat OpenShift Container Platform
- Red Hat OpenShift Data Science
- Red Hat OpenShift Online
- Red Hat OpenShift Dedicated
- Red Hat Advanced Cluster Security for Kubernetes
- Red Hat Advanced Cluster Management for Kubernetes
- Red Hat Quay
- OpenShift Dev Spaces
- Red Hat OpenShift Service on AWS
Storage
- Red Hat Gluster Storage
- Red Hat Hyperconverged Infrastructure
- Red Hat Ceph Storage
- Red Hat OpenShift Data Foundation
Runtimes
- Red Hat Runtimes
- Red Hat JBoss Enterprise Application Platform
- Red Hat Data Grid
- Red Hat JBoss Web Server
- Red Hat Single Sign On
- Red Hat support for Spring Boot
- Red Hat build of Node.js
- Red Hat build of Thorntail
- Red Hat build of Eclipse Vert.x
- Red Hat build of OpenJDK
- Red Hat build of Quarkus
Integration and Automation
- Red Hat Process Automation
- Red Hat Process Automation Manager
- Red Hat Decision Manager
All Products
Issued:
2023-04-11
Updated:
2023-04-11
RHSA-2023:1691 - Security Advisory
- Overview
- Updated Packages
Synopsis
Important: kernel-rt security and bug fix update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
View affected systems
Topic
An update for kernel-rt is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
- kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- kernel-rt: update RT source tree to the latest RHEL-9.1.z3 Batch (BZ#2182066)
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.
Affected Products
- Red Hat Enterprise Linux for Real Time 9 x86_64
- Red Hat Enterprise Linux for Real Time for NFV 9 x86_64
Fixes
- BZ - 2159505 - CVE-2023-0386 kernel: FUSE filesystem low-privileged user privileges escalation
Red Hat Enterprise Linux for Real Time 9
SRPM
kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.src.rpm
SHA-256: b3dc17baa7cfd5b29823a2982d5212bbd4b2869a2f455d418908645f08d2b591
x86_64
kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: c85a9d654b2510f2d5046d0b4a88f203bdd627248bbe3e8b9ae68f704fe75bce
kernel-rt-core-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 80c6525226812c5a41b098cc74c5724d505588cc06a19b2e70fe44bdff243764
kernel-rt-debug-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 20b2d1799c8d9132e3ff4ffa7b090f26a16521b7473d8cced91addcca304662f
kernel-rt-debug-core-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 4e6bfe16cb9207c827287b96f5d4378f8c3b5d5a8d1426b819b3bada27723b0a
kernel-rt-debug-debuginfo-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 38e7a67f9455d53604db3ce1759727ec4df0b83f9d3beeed4e0331448237b70b
kernel-rt-debug-devel-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 4c9e8d4f5d4fd54e68c93a2e6d4bae786c8ce2a95d416ae16f4a714b23300b12
kernel-rt-debug-modules-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 501d9e6a095e84fc9ca68ce611bc264caaa670765c4ce743771e4764150402f1
kernel-rt-debug-modules-extra-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: d989a92bb508fa8275d69aad54bc9ed54b1e8c3821296666c22f05a1a52667d1
kernel-rt-debuginfo-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 4c1453b0c141266b8a232c9735f6c3b1ab940a08699a35be327e1bbaa38defcd
kernel-rt-debuginfo-common-x86_64-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 5cf979018797cab9db0bdd33c7c5a11c36751da2d693f9d560f36b66c6be7ba8
kernel-rt-devel-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 055e928c68f9ca86439ec9be60157a0255b3092912839e7c0cf3aa06dc9b570d
kernel-rt-modules-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 1a6652b342892f4d9660a19623b5047ed7d50df10e8075ce32d4488883ebee3e
kernel-rt-modules-extra-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: dccd8d908c09bc58d245d4f54ce65bb8805753644dbefe17a745543d455a3c0a
Red Hat Enterprise Linux for Real Time for NFV 9
SRPM
kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.src.rpm
SHA-256: b3dc17baa7cfd5b29823a2982d5212bbd4b2869a2f455d418908645f08d2b591
x86_64
kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: c85a9d654b2510f2d5046d0b4a88f203bdd627248bbe3e8b9ae68f704fe75bce
kernel-rt-core-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 80c6525226812c5a41b098cc74c5724d505588cc06a19b2e70fe44bdff243764
kernel-rt-debug-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 20b2d1799c8d9132e3ff4ffa7b090f26a16521b7473d8cced91addcca304662f
kernel-rt-debug-core-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 4e6bfe16cb9207c827287b96f5d4378f8c3b5d5a8d1426b819b3bada27723b0a
kernel-rt-debug-debuginfo-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 38e7a67f9455d53604db3ce1759727ec4df0b83f9d3beeed4e0331448237b70b
kernel-rt-debug-devel-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 4c9e8d4f5d4fd54e68c93a2e6d4bae786c8ce2a95d416ae16f4a714b23300b12
kernel-rt-debug-kvm-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: e3aa442b54a58a37b01e20817961edba4dbd7dda511e1e8dbf011813bc6c1f32
kernel-rt-debug-modules-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 501d9e6a095e84fc9ca68ce611bc264caaa670765c4ce743771e4764150402f1
kernel-rt-debug-modules-extra-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: d989a92bb508fa8275d69aad54bc9ed54b1e8c3821296666c22f05a1a52667d1
kernel-rt-debuginfo-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 4c1453b0c141266b8a232c9735f6c3b1ab940a08699a35be327e1bbaa38defcd
kernel-rt-debuginfo-common-x86_64-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 5cf979018797cab9db0bdd33c7c5a11c36751da2d693f9d560f36b66c6be7ba8
kernel-rt-devel-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 055e928c68f9ca86439ec9be60157a0255b3092912839e7c0cf3aa06dc9b570d
kernel-rt-kvm-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 38c23f26aed9c0328344091c95cbb9aaf7cc644708a20ba2befaa2f387550bfc
kernel-rt-modules-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: 1a6652b342892f4d9660a19623b5047ed7d50df10e8075ce32d4488883ebee3e
kernel-rt-modules-extra-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm
SHA-256: dccd8d908c09bc58d245d4f54ce65bb8805753644dbefe17a745543d455a3c0a
The Red Hat security contact is [email protected]. More contact details at https://access.redhat.com/security/team/contact/.
Related news
This Metasploit module exploit targets the Linux kernel bug in OverlayFS. A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
Cybersecurity researchers have disclosed two high-severity security flaws in the Ubuntu kernel that could pave the way for local privilege escalation attacks. Cloud security firm Wiz, in a report shared with The Hacker News, said the easy-to-exploit shortcomings have the potential to impact 40% of Ubuntu users. "The impacted Ubuntu versions are prevalent in the cloud as they serve as the default
It was discovered that the OverlayFS implementation in the Linux kernel did not properly handle copy up operation in some conditions. A local attacker could possibly use this to gain elevated privileges. It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did not properly perform data buffer size validation in some situations. A physically proximate attacker could use this to craft a malicious USB device that when inserted, could cause a denial of service (system crash) or possibly expose sensitive information. It was discovered that a race condition existed in the io_uring subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. Various other issues were also addressed.
Debian Linux Security Advisory 5402-1 - Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Ubuntu Security Notice 6071-1 - It was discovered that the Traffic-Control Index implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the TCINDEX classifier has been removed. Lin Ma discovered a race condition in the io_uring subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service.
Red Hat Advanced Cluster Management for Kubernetes 2.5.8 General Availability release images, which fix bugs and security updates container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-25881: A flaw was found in http-cache-semantics. When the server reads the cache policy from the request using this library, a Regular Expression Denial of Service occurs, caused by malicious request header values sent to the server.
Red Hat Security Advisory 2023-2083-01 - Red Hat Advanced Cluster Management for Kubernetes 2.6.5 General Availability release images, which fix bugs and security updates container images. Issues addressed include denial of service and server-side request forgery vulnerabilities.
Ubuntu Security Notice 6043-1 - It was discovered that the Traffic-Control Index implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for thisCVE, kernel support for the TCINDEX classifier has been removed. It was discovered that the OverlayFS implementation in the Linux kernel did not properly handle copy up operation in some conditions. A local attacker could possibly use this to gain elevated privileges.
Ubuntu Security Notice 6040-1 - It was discovered that the Traffic-Control Index implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the OverlayFS implementation in the Linux kernel did not properly handle copy up operation in some conditions. A local attacker could possibly use this to gain elevated privileges.
Red Hat Security Advisory 2023-1970-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system.
An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-0386: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges o...
Ubuntu Security Notice 6025-1 - It was discovered that the Traffic-Control Index implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the OverlayFS implementation in the Linux kernel did not properly handle copy up operation in some conditions. A local attacker could possibly use this to gain elevated privileges.
Red Hat Security Advisory 2023-1677-01 - The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. The ovirt-node-ng packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. Issues addressed include heap overflow and integer overflow vulnerabilities.
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-0386: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
An update for kpatch-patch is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-0386: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-23521: A flaw was found in Git, a distributed revision control system. When parsing gitattributes, a mechanism to allow defining attributes for paths, multiple integer overflows can occur when there is a huge number of path patterns, attributes for a single pattern, ...
Red Hat Security Advisory 2023-1660-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.
Red Hat Security Advisory 2023-1659-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4378: A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system. * CVE-2023-0266: A use-after-free flaw was found in snd_ctl_elem_read in sound/core/control.c in Advanced Linux So...
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-0266: A use-after-free flaw was found in snd_ctl_elem_read in sound/core/control.c in Advanced Linux Sound Architecture (ALSA) subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak problem. * CVE...
Red Hat Security Advisory 2023-1584-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of se...
An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-0266: A use-after-free flaw was found in the ALSA subsystem in sound/core/control.c in the Linux kernel. This flaw allows a local attacker to cause a use-after-free issue. * CVE-2023-0386: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux...
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.