p PatchFirst

RLSA-2024:0134

RLSA-2024:0134 · Important: kernel-rt security update

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: use after free in unix_stream_sendpage (CVE-2023-4622) * kernel: vmwgfx: reference count issue leads to use-after-free in surface handling (CVE-2023-5633) * kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753) * Kernel: UAF during login when accessing the shost ipaddress (CVE-2023-2162) * hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel-rt: update RT source tree to the latest Rocky Linux-8.9.z1 Batch (JIRA:Rocky Linux-17347)

Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • kernel-rt Rocky Linux:8

    Plages de versions concernées
    • ECOSYSTEM: < 0:4.18.0-513.11.1.rt7.313.el8_9

    Mettez à jour vers 0:4.18.0-513.11.1.rt7.313.el8_9

Sources originales

Vérifiez votre serveur →