RHSA-2023:5255

Description

Red Hat Security Advisory: kernel-rt security and bug fix update

CVSS Metrics

• v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

• redhat•kernel-rt

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-core

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-debug

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-debug-core

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-debug-debuginfo

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-debug-devel

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-debug-kvm

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-debug-modules

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-debug-modules-extra

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-debuginfo

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-debuginfo-common-x86_64

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-devel

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-kvm

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-modules

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

• redhat•kernel-rt-modules-extra

  < 0:4.18.0-477.27.1.rt7.290.el8_8 | < 0:4.18.0-477.27.1.rt7.290.el8_8

References (50)

• https://access.redhat.com/errata/RHSA-2023:5255
• https://access.redhat.com/security/updates/classification/#important
• https://bugzilla.redhat.com/show_bug.cgi?id=2187308
• https://bugzilla.redhat.com/show_bug.cgi?id=2213260
• https://bugzilla.redhat.com/show_bug.cgi?id=2215768
• https://bugzilla.redhat.com/show_bug.cgi?id=2217845
• https://bugzilla.redhat.com/show_bug.cgi?id=2218672
• https://bugzilla.redhat.com/show_bug.cgi?id=2220892
• https://bugzilla.redhat.com/show_bug.cgi?id=2225097
• https://bugzilla.redhat.com/show_bug.cgi?id=2225275
• https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5255.json
• https://access.redhat.com/security/cve/CVE-2023-1637
• https://bugzilla.redhat.com/show_bug.cgi?id=2181891
• https://www.cve.org/CVERecord?id=CVE-2023-1637
• https://nvd.nist.gov/vuln/detail/CVE-2023-1637
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e2a1256b17b16f9b9adf1b6fea56819e7b68e463
• https://sourceware.org/bugzilla/show_bug.cgi?id=27398
• https://access.redhat.com/security/cve/CVE-2023-2002
• https://www.cve.org/CVERecord?id=CVE-2023-2002
• https://nvd.nist.gov/vuln/detail/CVE-2023-2002
• https://www.openwall.com/lists/oss-security/2023/04/16/3
• https://access.redhat.com/security/cve/CVE-2023-3090
• https://www.cve.org/CVERecord?id=CVE-2023-3090
• https://nvd.nist.gov/vuln/detail/CVE-2023-3090
• https://access.redhat.com/security/cve/CVE-2023-3390
• https://www.cve.org/CVERecord?id=CVE-2023-3390
• https://nvd.nist.gov/vuln/detail/CVE-2023-3390
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97
• https://access.redhat.com/security/cve/CVE-2023-3776
• https://www.cve.org/CVERecord?id=CVE-2023-3776
• https://nvd.nist.gov/vuln/detail/CVE-2023-3776
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0323bce598eea038714f941ce2b22541c46d488f
• https://access.redhat.com/security/cve/CVE-2023-4004
• https://www.cve.org/CVERecord?id=CVE-2023-4004
• https://nvd.nist.gov/vuln/detail/CVE-2023-4004
• https://patchwork.ozlabs.org/project/netfilter-devel/patch/20230719190824.21196-1-fw@strlen.de/
• https://access.redhat.com/security/cve/CVE-2023-20593
• https://www.cve.org/CVERecord?id=CVE-2023-20593
• https://nvd.nist.gov/vuln/detail/CVE-2023-20593
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=522b1d69219d8f083173819fde04f994aa051a98
• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7008.html
• https://access.redhat.com/security/cve/CVE-2023-35001
• https://www.cve.org/CVERecord?id=CVE-2023-35001
• https://nvd.nist.gov/vuln/detail/CVE-2023-35001
• https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/
• https://www.openwall.com/lists/oss-security/2023/07/05/3
• https://access.redhat.com/security/cve/CVE-2023-35788
• https://www.cve.org/CVERecord?id=CVE-2023-35788
• https://nvd.nist.gov/vuln/detail/CVE-2023-35788
• https://www.openwall.com/lists/oss-security/2023/06/07/1