RHSA-2023:5627: Important: kernel security, bug fix, and enhancement update

Published Oct 10, 2023
·
Updated

Important: kernel security, bug fix, and enhancement update

Other sources

The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: use-after-free vulnerability in the perfgroupdetach function of the Linux Kernel Performance Events (CVE-2023-2235) kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090) kernel: netfilter: use-after-free due to improper element removal in nftpipaporemove() (CVE-2023-4004) kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: clsfw, clsu32 and clsroute (CVE-2023-4128) kernel: nftables: stack-out-of-bounds-read in nftbyteordereval() (CVE-2023-35001) kernel: race condition in VTRESIZEX ioctl when vccons[i].d is already NULL leading to NULL pointer dereference (CVE-2020-36558) kernel: LoadPin bypass via dm-verity table reload (CVE-2022-2503) kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873) kernel: xfrmexpandpolicies() in net/xfrm/xfrmpolicy.c can cause a refcount to be dropped twice (CVE-2022-36879) kernel: use-after-free due to race condition in qdiscgraft() (CVE-2023-0590) kernel: netfilter: NULL pointer dereference in nftables due to zeroed list head (CVE-2023-1095) kernel: hash collisions in the IPv6 connection lookup table (CVE-2023-1206) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): [HPEMC RHEL 8 REGRESSION] acpi-cpufreq: Skip initialization if a cpufreq driver exists (BZ#2186307) [max] RHEL8.4 Pre-Alpha - [ 4.18.0-240.4.el8.dt2.ppc64le ][ fleetwood / P9 64TB/192c ] While performing DLPAR CPU operations "BUG: arch topology borken" messages are observed and CPU remove operation fails for removal of 140 with 255 return (BZ#2210295) [Intel 8.8 BUG] [SPR] IOMMU: QAT Device Address Translation Issue with Invalidation Completion Ordering (BZ#2221098) avoid unnecessary page fault retires on shared memory types (BZ#2221101) [i40e] error: Cannot set interface MAC/vlanid to 1e:b7:e2:02:b1:aa/0 for ifname ens4f0 vf 0: Resource temporarily unavailable (BZ#2228164) oops on cifsmount due to null tcon (BZ#2229129) kernel panic due to stack overflow on ppc64le due to deep call chain. (BZ#2230268) [Hyper-V][RHEL 8]incomplete fctransport implementation in storvsc causes null dereference in fctimedout() (BZ#2230744) Withdrawal: GFS2: couldn't freeze filesystem: -16 (BZ#2231826) [RHEL 8][Hyper-V]Excessive hvstorvsc driver logging with srbstatus SRBSTATUSINTERNALERROR (0x30) (BZ#2231989) kernel-devel RPM cross-compiled by CKI contains host-arch scripts (BZ#2232138) RHEL-8: crypto: rng - Fix lock imbalance in cryptodelrng (BZ#2232216) [Intel 8.9] iavf: Driver Update (BZ#2232400) Important iavf bug fixes July 2023 (BZ#2232401) iavf: hang in iavfremove() - SNO node hangs after running systemctl reboot (BZ#2232404) [RHEL 8.9] Proactively backport locking fixes from upstream (BZ#2235394) NAT sport clash in OCP causing 1 second TCP connection establishment delay. (BZ#2236515) xfs: mount fails when device file name is long (BZ#2236814) netfilter: RHEL 8.8 phase 2 backports from upstream (BZ#2236817) swap deadlock when attempt to charge a page to a cgroup stalls waiting on I/O plugged on another task in swap code (BZ#2237686) Enhancement(s): [Intel 8.7 FEAT] TSC: Avoid clock watchdog when not needed (BZ#2216051)

— Red Hat

Affected Software

116 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat Virtualization Host
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
redhat/kernel<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/bpftool<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/bpftool-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-abi-stablelists<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-core<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-cross-headers<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-core<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-devel<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-modules<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-modules-extra<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-devel<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-doc<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-headers<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-modules<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-modules-extra<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-tools<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-tools-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-tools-libs<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/perf<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/perf-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/python3-perf<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/python3-perf-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/bpftool<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/bpftool-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-core<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-cross-headers<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-core<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-devel<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-modules<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-modules-extra<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debuginfo-common-s390x<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-devel<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-headers<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-modules<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-modules-extra<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-tools<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-tools-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-zfcpdump<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-zfcpdump-core<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-zfcpdump-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-zfcpdump-devel<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-zfcpdump-modules<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-zfcpdump-modules-extra<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/perf<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/perf-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/python3-perf<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/python3-perf-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/bpftool<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/bpftool-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-core<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-cross-headers<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-core<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-devel<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-modules<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debug-modules-extra<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-debuginfo-common-ppc64le<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-devel<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-headers<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-modules<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-modules-extra<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-tools<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-tools-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-tools-libs<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/perf<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/perf-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/python3-perf<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/python3-perf-debuginfo<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/bpftool<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/bpftool-debuginfo<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-core<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-cross-headers<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-debug<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-debug-core<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-debug-debuginfo<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-debug-devel<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-debug-modules<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-debug-modules-extra<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-debuginfo<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-debuginfo-common-aarch64<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-devel<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-headers<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-modules<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-modules-extra<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-tools<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-tools-debuginfo<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-tools-libs<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/perf<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/perf-debuginfo<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/python3-perf<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/python3-perf-debuginfo<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa
redhat/kernel-tools-libs-devel<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-tools-libs-devel<4.18.0-372.75.1.el8_6
4.18.0-372.75.1.el8_6
redhat/kernel-tools-libs-devel<4.18.0-372.75.1.el8_6.aa
4.18.0-372.75.1.el8_6.aa

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  2. Upgrade

    Upgrade redhat/bpftool to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  3. Upgrade

    Upgrade redhat/bpftool-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  4. Upgrade

    Upgrade redhat/kernel-abi-stablelists to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  5. Upgrade

    Upgrade redhat/kernel-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  6. Upgrade

    Upgrade redhat/kernel-cross-headers to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  7. Upgrade

    Upgrade redhat/kernel-debug to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  8. Upgrade

    Upgrade redhat/kernel-debug-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  9. Upgrade

    Upgrade redhat/kernel-debug-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  10. Upgrade

    Upgrade redhat/kernel-debug-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  11. Upgrade

    Upgrade redhat/kernel-debug-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  12. Upgrade

    Upgrade redhat/kernel-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  13. Upgrade

    Upgrade redhat/kernel-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  14. Upgrade

    Upgrade redhat/kernel-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  15. Upgrade

    Upgrade redhat/kernel-doc to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  16. Upgrade

    Upgrade redhat/kernel-headers to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  17. Upgrade

    Upgrade redhat/kernel-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  18. Upgrade

    Upgrade redhat/kernel-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  19. Upgrade

    Upgrade redhat/kernel-tools to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  20. Upgrade

    Upgrade redhat/kernel-tools-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  21. Upgrade

    Upgrade redhat/kernel-tools-libs to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  22. Upgrade

    Upgrade redhat/perf to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  23. Upgrade

    Upgrade redhat/perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  24. Upgrade

    Upgrade redhat/python3-perf to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  25. Upgrade

    Upgrade redhat/python3-perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  26. Upgrade

    Upgrade redhat/kernel-debuginfo-common-s390x to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  27. Upgrade

    Upgrade redhat/kernel-zfcpdump to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  28. Upgrade

    Upgrade redhat/kernel-zfcpdump-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  29. Upgrade

    Upgrade redhat/kernel-zfcpdump-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  30. Upgrade

    Upgrade redhat/kernel-zfcpdump-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  31. Upgrade

    Upgrade redhat/kernel-zfcpdump-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  32. Upgrade

    Upgrade redhat/kernel-zfcpdump-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  33. Upgrade

    Upgrade redhat/kernel-debuginfo-common-ppc64le to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  34. Upgrade

    Upgrade redhat/bpftool to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  35. Upgrade

    Upgrade redhat/bpftool-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  36. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  37. Upgrade

    Upgrade redhat/kernel-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  38. Upgrade

    Upgrade redhat/kernel-cross-headers to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  39. Upgrade

    Upgrade redhat/kernel-debug to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  40. Upgrade

    Upgrade redhat/kernel-debug-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  41. Upgrade

    Upgrade redhat/kernel-debug-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  42. Upgrade

    Upgrade redhat/kernel-debug-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  43. Upgrade

    Upgrade redhat/kernel-debug-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  44. Upgrade

    Upgrade redhat/kernel-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  45. Upgrade

    Upgrade redhat/kernel-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  46. Upgrade

    Upgrade redhat/kernel-debuginfo-common-aarch64 to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  47. Upgrade

    Upgrade redhat/kernel-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  48. Upgrade

    Upgrade redhat/kernel-headers to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  49. Upgrade

    Upgrade redhat/kernel-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  50. Upgrade

    Upgrade redhat/kernel-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  51. Upgrade

    Upgrade redhat/kernel-tools to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  52. Upgrade

    Upgrade redhat/kernel-tools-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  53. Upgrade

    Upgrade redhat/kernel-tools-libs to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  54. Upgrade

    Upgrade redhat/perf to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  55. Upgrade

    Upgrade redhat/perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  56. Upgrade

    Upgrade redhat/python3-perf to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  57. Upgrade

    Upgrade redhat/python3-perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  58. Upgrade

    Upgrade redhat/kernel-tools-libs-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6
  59. Upgrade

    Upgrade redhat/kernel-tools-libs-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-372.75.1.el8_6.aa
  60. Upgrade

    Upgrade kernel to a version that resolves this vulnerability.

    Patch BZ#2235394
  61. Upgrade

    Upgrade kernel to a version that resolves this vulnerability.

    Patch BZ#2232216
  62. Upgrade

    Upgrade kernel to a version that resolves this vulnerability.

    Fixed in RHEL 8.8Patch BZ#2236817
  63. Upgrade

    Upgrade iavf driver to a version that resolves this vulnerability.

    Fixed in RHEL 8.9Patch BZ#2232400
  64. Upgrade

    Upgrade kernel to a version that resolves this vulnerability.

    Fixed in RHEL 8Patch BZ#2230744
  65. Upgrade

    Upgrade kernel to a version that resolves this vulnerability.

    Fixed in RHEL 8.9Patch BZ#2236817
  66. Upgrade

    Upgrade kernel to a version that resolves this vulnerability.

    Fixed in RHEL 8.8Patch BZ#2235394
  67. Upgrade

    Upgrade kernel to a version that resolves this vulnerability.

    Fixed in RHEL 8.9Patch BZ#2232401
  68. Operational

    Reboot the system after applying the kernel update so the changes described in the advisory take effect.

Event History

Oct 10, 2023
Advisory Published
04:07 PM
Jul 14, 2025
Advisory Published
via Red Hat·07:07 AM
Data Sourced
via Red Hat·07:07 AM
RemedyDescriptionAffected Software

Frequently Asked Questions

1

What is the severity of RHSA-2023:5627?

The severity of RHSA-2023:5627 is classified as important.

2

How do I fix RHSA-2023:5627?

To fix RHSA-2023:5627, upgrade to the kernel version 4.18.0-372.75.1.el8_6.

3

What vulnerabilities are addressed by RHSA-2023:5627?

RHSA-2023:5627 addresses a use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events.

4

Which systems are affected by RHSA-2023:5627?

Systems affected by RHSA-2023:5627 include various configurations of Red Hat Enterprise Linux for ARM 64 and x86_64, among others.

5

Is there a specific package version required for RHSA-2023:5627?

Yes, the remediation requires specific packages such as kernel and bpftool at version 4.18.0-372.75.1.el8_6.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203