ALSA-2023:4377
ALSA-2023:4377 · Important: kernel security, bug fix, and enhancement update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090) * kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788) * kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869) * kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458) * kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
bpftool AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 7.0.0-284.25.1.el9_2
Update to 7.0.0-284.25.1.el9_2
kernel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-debug AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-debug-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-debug-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-debug-devel-matched AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-debug-modules AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-debug-modules-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-debug-modules-extra AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-devel-matched AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-modules AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-modules-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-64k-modules-extra AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-abi-stablelists AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-cross-headers AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-debug AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-debug-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-debug-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-debug-devel-matched AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
kernel-debug-modules AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-284.25.1.el9_2
Update to 5.14.0-284.25.1.el9_2
Original sources
- https://access.redhat.com/errata/RHSA-2023:4377
- https://access.redhat.com/security/cve/CVE-2022-45869
- https://access.redhat.com/security/cve/CVE-2023-0458
- https://access.redhat.com/security/cve/CVE-2023-1998
- https://access.redhat.com/security/cve/CVE-2023-3090
- https://access.redhat.com/security/cve/CVE-2023-35788
- https://bugzilla.redhat.com/2151317
- https://bugzilla.redhat.com/2187257
- https://bugzilla.redhat.com/2193219
- https://bugzilla.redhat.com/2215768
- https://bugzilla.redhat.com/2218672
- https://errata.almalinux.org/9/ALSA-2023-4377.html
- https://osv.dev/vulnerability/ALSA-2023:4377