RHSA-2023:5603

Description

Red Hat Security Advisory: kernel-rt security and bug fix update

CVSS Metrics

• v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

• redhat•kernel-rt

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-core

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-debug

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-debug-core

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-debug-debuginfo

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-debug-devel

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-debug-kvm

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-debug-modules

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-debug-modules-extra

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-debuginfo

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-debuginfo-common-x86_64

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-devel

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-kvm

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-modules

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

• redhat•kernel-rt-modules-extra

  < 0:5.14.0-70.75.1.rt21.146.el9_0 | < 0:5.14.0-70.75.1.rt21.146.el9_0

References (48)

• https://access.redhat.com/errata/RHSA-2023:5603
• https://access.redhat.com/security/updates/classification/#important
• https://bugzilla.redhat.com/show_bug.cgi?id=2175903
• https://bugzilla.redhat.com/show_bug.cgi?id=2177382
• https://bugzilla.redhat.com/show_bug.cgi?id=2187257
• https://bugzilla.redhat.com/show_bug.cgi?id=2213485
• https://bugzilla.redhat.com/show_bug.cgi?id=2215768
• https://bugzilla.redhat.com/show_bug.cgi?id=2220892
• https://bugzilla.redhat.com/show_bug.cgi?id=2220893
• https://bugzilla.redhat.com/show_bug.cgi?id=2225511
• https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5603.json
• https://access.redhat.com/security/cve/CVE-2023-1206
• https://www.cve.org/CVERecord?id=CVE-2023-1206
• https://nvd.nist.gov/vuln/detail/CVE-2023-1206
• https://git.kernel.org/linus/d11b0df7ddf1831f3e170972f43186dad520bfcc
• https://access.redhat.com/security/cve/CVE-2023-1998
• https://www.cve.org/CVERecord?id=CVE-2023-1998
• https://nvd.nist.gov/vuln/detail/CVE-2023-1998
• https://github.com/google/security-research/security/advisories/GHSA-mj4w-6495-6crx
• https://access.redhat.com/security/cve/CVE-2023-3161
• https://www.cve.org/CVERecord?id=CVE-2023-3161
• https://nvd.nist.gov/vuln/detail/CVE-2023-3161
• https://access.redhat.com/security/cve/CVE-2023-4128
• https://bugzilla.redhat.com/show_bug.cgi?id=2261965
• https://www.cve.org/CVERecord?id=CVE-2023-4128
• https://nvd.nist.gov/vuln/detail/CVE-2023-4128
• https://access.redhat.com/security/cve/CVE-2023-4206
• https://access.redhat.com/security/cve/CVE-2023-4207
• https://access.redhat.com/security/cve/CVE-2023-4208
• https://access.redhat.com/security/cve/CVE-2023-28327
• https://www.cve.org/CVERecord?id=CVE-2023-28327
• https://nvd.nist.gov/vuln/detail/CVE-2023-28327
• https://lore.kernel.org/netdev/CAO4mrffDLiqo3hWRC=uP_E-3VQSV4O=1BiOaS0Z1J0GHLVgzVQ@mail.gmail.com/T/#m3082ca8922ae87cbb9e460a6c65fe09eee2c99b9
• https://access.redhat.com/security/cve/CVE-2023-31248
• https://www.cve.org/CVERecord?id=CVE-2023-31248
• https://nvd.nist.gov/vuln/detail/CVE-2023-31248
• https://lore.kernel.org/netfilter-devel/20230705121627.GC19489@breakpoint.cc/T/
• https://www.openwall.com/lists/oss-security/2023/07/05/2
• https://www.zerodayinitiative.com/advisories/ZDI-23-899/
• https://access.redhat.com/security/cve/CVE-2023-35001
• https://www.cve.org/CVERecord?id=CVE-2023-35001
• https://nvd.nist.gov/vuln/detail/CVE-2023-35001
• https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/
• https://www.openwall.com/lists/oss-security/2023/07/05/3
• https://access.redhat.com/security/cve/CVE-2023-35788
• https://www.cve.org/CVERecord?id=CVE-2023-35788
• https://nvd.nist.gov/vuln/detail/CVE-2023-35788
• https://www.openwall.com/lists/oss-security/2023/06/07/1