Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:0386
HistoryJan 24, 2024 - 8:54 a.m.

(RHSA-2024:0386) Important: kpatch-patch security update

2024-01-2408:54:34
access.redhat.com
15
rhsa-2024-0386
kpatch-patch
security update
kernel
net/sched: sch_hfsc uaf
use after free
nvmet_tcp_free_crypto
igb driver
cve-2023-4623
cve-2023-5178
cve-2023-45871
cvss score
references

9.8 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.1%

JSON

This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.

Security Fix(es):

  • kernel: net/sched: sch_hfsc UAF (CVE-2023-4623)

  • kernel: use after free in nvmet_tcp_free_crypto in NVMe (CVE-2023-5178)

  • kernel: IGB driver inadequate buffer size for frames larger than MTU (CVE-2023-45871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9x86_64kpatch-patch-5_14_0-70_64_1-debuginfo< 1-4.el9_0kpatch-patch-5_14_0-70_64_1-debuginfo-1-4.el9_0.x86_64.rpm
RedHat9ppc64lekpatch-patch-5_14_0-70_75_1-debugsource< 1-2.el9_0kpatch-patch-5_14_0-70_75_1-debugsource-1-2.el9_0.ppc64le.rpm
RedHat9x86_64kpatch-patch-5_14_0-70_70_1-debugsource< 1-3.el9_0kpatch-patch-5_14_0-70_70_1-debugsource-1-3.el9_0.x86_64.rpm
RedHat9x86_64kpatch-patch-5_14_0-70_64_1-debugsource< 1-4.el9_0kpatch-patch-5_14_0-70_64_1-debugsource-1-4.el9_0.x86_64.rpm
RedHat9ppc64lekpatch-patch-5_14_0-70_80_1-debugsource< 1-1.el9_0kpatch-patch-5_14_0-70_80_1-debugsource-1-1.el9_0.ppc64le.rpm
RedHat9ppc64lekpatch-patch-5_14_0-70_64_1< 1-4.el9_0kpatch-patch-5_14_0-70_64_1-1-4.el9_0.ppc64le.rpm
RedHat9ppc64lekpatch-patch-5_14_0-70_80_1-debuginfo< 1-1.el9_0kpatch-patch-5_14_0-70_80_1-debuginfo-1-1.el9_0.ppc64le.rpm
RedHat9x86_64kpatch-patch-5_14_0-70_75_1-debuginfo< 1-2.el9_0kpatch-patch-5_14_0-70_75_1-debuginfo-1-2.el9_0.x86_64.rpm
RedHat9x86_64kpatch-patch-5_14_0-70_75_1-debugsource< 1-2.el9_0kpatch-patch-5_14_0-70_75_1-debugsource-1-2.el9_0.x86_64.rpm
RedHat9ppc64lekpatch-patch-5_14_0-70_75_1< 1-2.el9_0kpatch-patch-5_14_0-70_75_1-1-2.el9_0.ppc64le.rpm
Rows per page:
1-10 of 241

Related

nessus 94
ibm 4
redhat 25
prion 3
cvelist 3
nvd 3
redhatcve 3
ubuntucve 3
cbl_mariner 4
cve 3
debiancve 3
virtuozzo 2
openvas 12
githubexploit 1
oraclelinux 9
cnvd 1
osv 9
ubuntu 8
rosalinux 3
photon 2
rocky 1
amazon 3
nessus
nessus
RHEL 9 : kpatch-patch (RHSA-2024:0386)
2024-01-25 00:00:00
RHEL 8 : kpatch-patch (RHSA-2024:0876)
2024-02-20 00:00:00
AlmaLinux 8 : kpatch-patch (ALSA-2024:0876)
2024-02-22 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2023-42753, CVE-2023-5178, CVE-2023-47710, CVE-2023-45871)
2024-05-23 17:59:38
Security Bulletin: Vulnerability in Linux Kernel could affect IBM Storage Copy Data Management
2024-04-30 21:41:37
Security Bulletin: Multiple Linux Kernel vulnerabilities affects IBM Storage Scale System.
2024-05-03 09:04:24
redhat
redhat
(RHSA-2024:0554) Important: kpatch-patch security update
2024-01-30 00:13:52
(RHSA-2024:0876) Important: kpatch-patch security update
2024-02-20 04:44:23
(RHSA-2024:0378) Important: kpatch-patch security update
2024-01-23 17:16:18
prion
prion
Code injection
2023-10-15 01:15:00
Double free
2023-11-01 17:15:00
Design/Logic Flaw
2023-09-06 14:15:00
cvelist
cvelist
CVE-2023-45871
2023-10-15 00:00:00
CVE-2023-5178 Kernel: use after free in nvmet_tcp_free_crypto in nvme
2023-11-01 16:32:20
CVE-2023-4623 Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component
2023-09-06 13:56:57
nvd
nvd
CVE-2023-45871
2023-10-15 01:15:09
CVE-2023-4623
2023-09-06 14:15:12
CVE-2023-5178
2023-11-01 17:15:11
redhatcve
redhatcve
CVE-2023-45871
2023-10-18 00:59:23
CVE-2023-4623
2023-09-07 07:35:57
CVE-2023-5178
2023-10-16 04:16:55
ubuntucve
ubuntucve
CVE-2023-45871
2023-10-15 00:00:00
CVE-2023-4623
2023-09-06 00:00:00
CVE-2023-5178
2023-11-01 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-45871 affecting package kernel for versions less than 5.15.135.1-2
2023-11-08 02:07:28
CVE-2023-5178 affecting package kernel for versions less than 5.15.138.1-4
2023-12-05 04:40:34
CVE-2023-5178 affecting package hyperv-daemons for versions less than 5.15.137.1-1
2023-11-17 23:23:29
cve
cve
CVE-2023-45871
2023-10-15 01:15:09
CVE-2023-5178
2023-11-01 17:15:11
CVE-2023-4623
2023-09-06 14:15:12
debiancve
debiancve
CVE-2023-45871
2023-10-15 01:15:09
CVE-2023-4623
2023-09-06 14:15:12
CVE-2023-5178
2023-11-01 17:15:11
virtuozzo
virtuozzo
[Important] [Security] Virtuozzo ReadyKernel Patch 165.1 for Virtuozzo Hybrid Server 7.5
2023-12-19 00:00:00
[Important] [Security] Virtuozzo ReadyKernel Patch 163.1 for Virtuozzo Hybrid Server 7.5
2023-11-07 00:00:00
openvas
openvas
openSUSE: Security Advisory for the Linux Kernel RT (Live Patch 13 for SLE 15 SP4) (SUSE-SU-2023:4164-1)
2024-03-04 00:00:00
Ubuntu: Security Advisory (USN-6495-1)
2023-11-22 00:00:00
Ubuntu: Security Advisory (USN-6495-2)
2023-12-01 00:00:00
githubexploit
githubexploit
Exploit for Use After Free in Linux Linux Kernel
2024-02-05 15:58:24
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2023-12-13 00:00:00
Unbreakable Enterprise kernel-container security update
2023-12-14 00:00:00
Unbreakable Enterprise kernel-container security update
2023-12-14 00:00:00
cnvd
cnvd
Linux kernel elevation of privilege vulnerability (CNVD-2023-70079)
2023-09-11 00:00:00
osv
osv
linux, linux-aws, linux-aws-5.4, linux-bluefield, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities
2023-11-21 15:30:50
linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gkeop vulnerabilities
2023-11-30 17:38:29
linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15 vulnerabilities
2023-11-30 17:24:11
ubuntu
ubuntu
Linux kernel vulnerabilities
2023-11-21 00:00:00
Linux kernel vulnerabilities
2023-11-30 00:00:00
Linux kernel vulnerabilities
2023-11-21 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2385
2024-03-28 06:53:29
Advisory ROSA-SA-2024-2384
2024-03-28 06:52:37
Advisory ROSA-SA-2024-2383
2024-03-28 06:51:27
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0656
2023-09-27 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0488
2023-10-12 00:00:00
rocky
rocky
kernel security update
2024-01-12 19:59:56
amazon
amazon
Important: kernel
2023-09-27 22:15:00
Important: kernel
2023-09-27 22:48:00
Important: kernel
2023-09-27 22:48:00

9.8 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.1%

JSON
Related for RHSA-2024:0386
nessus94ibm4redhat25prion3cvelist3nvd3redhatcve3ubuntucve3cbl_mariner4cve3debiancve3virtuozzo2openvas12githubexploit1oraclelinux9cnvd1osv9ubuntu8rosalinux3photon2rocky1amazon3