(RHSA-2023:4256) Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation (CVE-2023-1281)

• kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation (CVE-2023-32233)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

• s390/qeth: cache link_info for ethtool (BZ#2174365)

• RHEL8.4 - kernel: fix __clear_user() inline assembly constraints (BZ#2192605)

• ice: ptp4l cpu usage spikes (BZ#2203288)

• 40%~70% block performance regression for localfs backend write between kernel-4.18.0-235.el8.x86_64 and kernel-4.18.0-277.el8.x86_64 (BZ#2204516)

• Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-number.rst (BZ#2208287)

• simultaneous writes to a page on xfs can result in zero-byte data (BZ#2208413)

• Windows Server 2019 guest randomly pauses with “KVM: entry failed, hardware error 0x80000021” [rhel8.8GA] (BZ#2211662)

• [Marvell 8.7 Bug] qedi shutdown handler hangs upon reboot (BZ#2215333)