ALSA-2023:4517

Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2023:4517.json

Aliases

• CVE-2022-42896 ( ALSA-2023:2148, ALSA-2023:2458, ALSA-2023:4541 )
• CVE-2023-1281 ( ALSA-2023:4541 )
• CVE-2023-1829 ( ALSA-2023:4541 )
• CVE-2023-2235 ( ALSA-2023:4541, ALSA-2023:3708, ALSA-2023:3723 )
• CVE-2023-2124 ( ALSA-2023:4541, ALSA-2023:3708, ALSA-2023:3723 )
• CVE-2023-2194 ( ALSA-2023:4541, ALSA-2023:3708, ALSA-2023:3723 )

Published

2023-08-08T00:00:00Z

Modified

2023-08-11T09:29:40Z

Details

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: use-after-free in l2capconnect and l2capleconnectreq in net/bluetooth/l2cap_core.c (CVE-2022-42896)
• kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation (CVE-2023-1281)
• kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter (CVE-2023-1829)
• kernel: use-after-free vulnerability in the perfgroupdetach function of the Linux Kernel Performance Events (CVE-2023-2235)
• kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)
• kernel: i2c: out-of-bounds write in xgeneslimproi2c_xfer() (CVE-2023-2194)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

• https://access.redhat.com/errata/RHSA-2023:4517
• https://access.redhat.com/security/cve/CVE-2022-42896
• https://access.redhat.com/security/cve/CVE-2023-1281
• https://access.redhat.com/security/cve/CVE-2023-1829
• https://access.redhat.com/security/cve/CVE-2023-2124
• https://access.redhat.com/security/cve/CVE-2023-2194
• https://access.redhat.com/security/cve/CVE-2023-2235
• https://bugzilla.redhat.com/2147364
• https://bugzilla.redhat.com/2181847
• https://bugzilla.redhat.com/2187439
• https://bugzilla.redhat.com/2188396
• https://bugzilla.redhat.com/2188470
• https://bugzilla.redhat.com/2192589
• https://errata.almalinux.org/8/ALSA-2023-4517.html