p PatchFirst

RLSA-2024:0134

RLSA-2024:0134 · Important: kernel-rt security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: use after free in unix_stream_sendpage (CVE-2023-4622) * kernel: vmwgfx: reference count issue leads to use-after-free in surface handling (CVE-2023-5633) * kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753) * Kernel: UAF during login when accessing the shost ipaddress (CVE-2023-2162) * hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel-rt: update RT source tree to the latest Rocky Linux-8.9.z1 Batch (JIRA:Rocky Linux-17347)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • kernel-rt Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:4.18.0-513.11.1.rt7.313.el8_9

    Update to 0:4.18.0-513.11.1.rt7.313.el8_9

Original sources

Check your server →