RHSA-2024:0403: Important: kernel security update
Important: kernel security update
Other sources
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe (CVE-2023-2163) kernel: use after free in unixstreamsendpage (CVE-2023-4622) kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753) kernel: Race Condition leading to UAF in Unix Socket could happen in skreceivequeue (BZ#2230094) kernel: UAF during login when accessing the shost ipaddress (CVE-2023-2162) hw: amd: Cross-Process Information Leak (CVE-2023-20593) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:0403?
The security update RHSA-2024:0403 is rated Important due to potential vulnerabilities in the kernel related to unsafe code paths.
How do I fix RHSA-2024:0403?
To fix RHSA-2024:0403, apply the kernel security update by upgrading to version 4.18.0-193.120.1.el8_2 or later.
What vulnerabilities are addressed in RHSA-2024:0403?
RHSA-2024:0403 addresses a vulnerability associated with CVE-2023-2163, which involves incorrect verifier pruning in the BPF.
What packages are affected by RHSA-2024:0403?
The RHSA-2024:0403 affects packages including kernel, bpftool, and kernel-debug across multiple architectures.
How can I check if my system is affected by RHSA-2024:0403?
You can verify if your system is affected by checking your current kernel version and ensuring it is not lower than 4.18.0-193.120.1.el8_2.