ALSA-2024:0897
See a problem?- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2024:0897.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ALSA-2024:0897
- Related
- Published
- 2024-02-20T00:00:00Z
- Modified
- 2026-01-30T02:28:55Z
- Summary
- Important: kernel security update
- Details
-
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: net/sched: sch_hfsc UAF (CVE-2023-4623)
- kernel: use-after-free in sch_qfq network scheduler (CVE-2023-4921)
- kernel: inactive elements in nft_pipapo_walk (CVE-2023-6817)
- kernel: IGB driver inadequate buffer size for frames larger than MTU (CVE-2023-45871)
- kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination (CVE-2024-0646)
- kernel: nfp: use-after-free in area_cache_get() (CVE-2022-3545)
- kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip (CVE-2022-41858)
- kernel: HID: check empty report_list in hid_validate_values() (CVE-2023-1073)
- kernel: Possible use-after-free since the two fdget() during vhost_net_set_backend() (CVE-2023-1838)
- kernel: NULL pointer dereference in can_rcv_filter (CVE-2023-2166)
- kernel: Slab-out-of-bound read in compare_netdev_and_ip (CVE-2023-2176)
- kernel: A heap out-of-bounds write when function perf_read_group is called and sibling_list is smaller than its child's sibling_list (CVE-2023-5717)
- kernel: NULL pointer dereference in nvmet_tcp_build_iovec (CVE-2023-6356)
- kernel: NULL pointer dereference in nvmet_tcp_execute_request (CVE-2023-6535)
- kernel: NULL pointer dereference in __nvmet_req_complete (CVE-2023-6536)
- kernel: Out-Of-Bounds Read vulnerability in smbCalcSize (CVE-2023-6606)
- kernel: OOB Access in smb2_dump_detail (CVE-2023-6610)
- kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283)
- kernel: SEV-ES local priv escalation (CVE-2023-46813)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2024:0897
- https://access.redhat.com/security/cve/CVE-2022-3545
- https://access.redhat.com/security/cve/CVE-2022-41858
- https://access.redhat.com/security/cve/CVE-2023-1073
- https://access.redhat.com/security/cve/CVE-2023-1838
- https://access.redhat.com/security/cve/CVE-2023-2166
- https://access.redhat.com/security/cve/CVE-2023-2176
- https://access.redhat.com/security/cve/CVE-2023-40283
- https://access.redhat.com/security/cve/CVE-2023-45871
- https://access.redhat.com/security/cve/CVE-2023-4623
- https://access.redhat.com/security/cve/CVE-2023-46813
- https://access.redhat.com/security/cve/CVE-2023-4921
- https://access.redhat.com/security/cve/CVE-2023-5717
- https://access.redhat.com/security/cve/CVE-2023-6356
- https://access.redhat.com/security/cve/CVE-2023-6535
- https://access.redhat.com/security/cve/CVE-2023-6536
- https://access.redhat.com/security/cve/CVE-2023-6606
- https://access.redhat.com/security/cve/CVE-2023-6610
- https://access.redhat.com/security/cve/CVE-2023-6817
- https://access.redhat.com/security/cve/CVE-2024-0646
- https://bugzilla.redhat.com/2087568
- https://bugzilla.redhat.com/2144379
- https://bugzilla.redhat.com/2161310
- https://bugzilla.redhat.com/2173403
- https://bugzilla.redhat.com/2187813
- https://bugzilla.redhat.com/2187931
- https://bugzilla.redhat.com/2231800
- https://bugzilla.redhat.com/2237757
- https://bugzilla.redhat.com/2244723
- https://bugzilla.redhat.com/2245514
- https://bugzilla.redhat.com/2246944
- https://bugzilla.redhat.com/2246945
- https://bugzilla.redhat.com/2253611
- https://bugzilla.redhat.com/2253614
- https://bugzilla.redhat.com/2253908
- https://bugzilla.redhat.com/2254052
- https://bugzilla.redhat.com/2254053
- https://bugzilla.redhat.com/2254054
- https://bugzilla.redhat.com/2255139
- https://errata.almalinux.org/8/ALSA-2024-0897.html