Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
almalinuxAlmaLinuxALSA-2023:4378
HistoryAug 01, 2023 - 12:00 a.m.

Important: kernel-rt security and bug fix update

2023-08-0100:00:00
errata.almalinux.org
14
kernel-rt
real time linux kernel
security update
bug fix
ipvlan
cls_flower
kvm
spectre v2 smt mitigations

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

19.2%

JSON

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090)
  • kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)
  • kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869)
  • kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458)
  • kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9x86_64kernel-rt-debug-kvm< 5.14.0-284.25.1.rt14.310.el9_2kernel-rt-debug-kvm-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
almalinux9x86_64kernel-rt-debug-modules< 5.14.0-284.25.1.rt14.310.el9_2kernel-rt-debug-modules-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
almalinux9x86_64kernel-rt-modules< 5.14.0-284.25.1.rt14.310.el9_2kernel-rt-modules-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
almalinux9x86_64kernel-rt-kvm< 5.14.0-284.25.1.rt14.310.el9_2kernel-rt-kvm-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
almalinux9x86_64kernel-rt-devel< 5.14.0-284.25.1.rt14.310.el9_2kernel-rt-devel-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
almalinux9x86_64kernel-rt-core< 5.14.0-284.25.1.rt14.310.el9_2kernel-rt-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
almalinux9x86_64kernel-rt-debug< 5.14.0-284.25.1.rt14.310.el9_2kernel-rt-debug-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
almalinux9x86_64kernel-rt-modules-core< 5.14.0-284.25.1.rt14.310.el9_2kernel-rt-modules-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
almalinux9x86_64kernel-rt-debug-modules-extra< 5.14.0-284.25.1.rt14.310.el9_2kernel-rt-debug-modules-extra-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
almalinux9x86_64kernel-rt-debug-modules-core< 5.14.0-284.25.1.rt14.310.el9_2kernel-rt-debug-modules-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm
Rows per page:
1-10 of 141

Related

almalinux 2
osv 14
rocky 3
redhat 28
nessus 68
oraclelinux 5
cbl_mariner 12
nvd 5
cvelist 5
cve 5
debiancve 5
redhatcve 5
ubuntucve 5
prion 5
openvas 17
ubuntu 9
f5 1
zdt 1
exploitdb 1
amazon 2
ibm 1
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2023-08-01 00:00:00
Important: kernel security, bug fix, and enhancement update
2023-09-19 00:00:00
osv
osv
Important: kernel-rt security and bug fix update
2023-08-01 00:00:00
Important: kernel-rt security and bug fix update
2023-08-08 12:34:53
Important: kernel security, bug fix, and enhancement update
2023-08-01 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2023-08-08 12:34:53
kernel security, bug fix, and enhancement update
2023-10-06 22:19:15
kernel security, bug fix, and enhancement update
2023-09-26 13:26:05
redhat
redhat
(RHSA-2023:4377) Important: kernel security, bug fix, and enhancement update
2023-08-01 08:47:02
(RHSA-2023:4378) Important: kernel-rt security and bug fix update
2023-08-01 08:48:00
(RHSA-2023:4829) Important: kpatch-patch security update
2023-08-29 07:41:02
nessus
nessus
RHEL 9 : kernel-rt (RHSA-2023:4378)
2023-08-01 00:00:00
RHEL 9 : kernel (RHSA-2023:4377)
2023-08-01 00:00:00
Oracle Linux 9 : kernel (ELSA-2023-4377)
2023-08-03 00:00:00
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2023-08-04 00:00:00
kernel security, bug fix, and enhancement update
2023-09-21 00:00:00
kernel security and bug fix update
2023-08-31 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-45869 affecting package kernel for versions less than 5.15.82.1-1
2022-12-19 20:13:00
CVE-2022-45869 affecting package kernel 5.10.155.1-1
2022-12-27 17:56:16
CVE-2023-35788 affecting package kernel 5.10.183.1-1
2023-07-28 23:16:55
nvd
nvd
CVE-2022-45869
2022-11-30 05:15:11
CVE-2023-35788
2023-06-16 21:15:09
CVE-2023-3090
2023-06-28 20:15:09
cvelist
cvelist
CVE-2022-45869
2022-11-30 00:00:00
CVE-2023-35788
2023-06-16 00:00:00
CVE-2023-3090 Out-of-bounds write in Linux kernel's ipvlan network driver
2023-06-28 19:06:41
cve
cve
CVE-2022-45869
2022-11-30 05:15:11
CVE-2023-35788
2023-06-16 21:15:09
CVE-2023-1998
2023-04-21 15:15:07
debiancve
debiancve
CVE-2022-45869
2022-11-30 05:15:11
CVE-2023-1998
2023-04-21 15:15:07
CVE-2023-35788
2023-06-16 21:15:09
redhatcve
redhatcve
CVE-2022-45869
2022-12-06 17:58:43
CVE-2023-1998
2023-04-17 09:31:13
CVE-2023-35788
2023-06-23 13:17:21
ubuntucve
ubuntucve
CVE-2022-45869
2022-11-30 00:00:00
CVE-2023-35788
2023-06-16 00:00:00
CVE-2023-3090
2023-06-28 00:00:00
prion
prion
Race condition
2022-11-30 05:15:00
Design/Logic Flaw
2023-06-16 21:15:00
Heap overflow
2023-06-28 20:15:00
openvas
openvas
Ubuntu: Security Advisory (USN-6212-1)
2023-07-10 00:00:00
openSUSE: Security Advisory for the Linux Kernel RT (Live Patch 7 for SLE 15 SP4) (SUSE-SU-2023:3041-1)
2024-03-04 00:00:00
Ubuntu: Security Advisory (USN-6220-1)
2023-07-13 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2023-06-29 00:00:00
Linux kernel (GKE) vulnerabilities
2023-07-06 00:00:00
Linux kernel (Intel IoTG) vulnerabilities
2023-07-07 00:00:00
f5
f5
K000137791 : Linux kernel vulnerability CVE-2023-35788
2023-12-05 00:00:00
zdt
zdt
Linux Kernel 6.2 - Userspace Processes To Enable Mitigation Exploit
2023-04-20 00:00:00
exploitdb
exploitdb
Linux Kernel 6.2 - Userspace Processes To Enable Mitigation
2023-04-20 00:00:00
amazon
amazon
Important: kernel
2023-03-17 16:34:00
Important: kernel
2023-03-17 15:53:00
ibm
ibm
Security Bulletin: TSSC/IMC is vulnerable to aritrary code execution due to Linux Kernel
2024-07-02 00:09:08

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

19.2%

JSON
Related for ALSA-2023:4378
almalinux2osv14rocky3redhat28nessus68oraclelinux5cbl_mariner12nvd5cvelist5cve5debiancve5redhatcve5ubuntucve5prion5openvas17ubuntu9f51zdt1exploitdb1amazon2ibm1