ALSA-2023:7549
- Source
- https://errata.almalinux.org/8/ALSA-2023-7549.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2023:7549.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2023:7549
- Related
- Published
- 2023-11-28T00:00:00Z
- Modified
- 2023-12-04T01:02:19Z
- Summary
- Important: kernel security and bug fix update
- Details
-
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe (CVE-2023-2163)
- kernel: tun: bugs for oversize packet when napi frags enabled in tunnapialloc_frags (CVE-2023-3812)
- kernel: use after free in nvmettcpfree_crypto in NVMe (CVE-2023-5178)
- kernel: use-after-free due to race condition occurring in dvbregisterdevice() (CVE-2022-45884)
- kernel: use-after-free due to race condition occurring in dvb_net.c (CVE-2022-45886)
- kernel: use-after-free due to race condition occurring in dvbcaen50221.c (CVE-2022-45919)
- kernel: use-after-free in smb2isstatusiotimeout() (CVE-2023-1192)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es): * Fix max integer mmuinvalidateseq hanging vCPU (ALBZ#445) * Random delay receiving packets after bringing up VLAN on top of VF with vf-vlan-pruning enabled (BZ#2240750) * bpfjitlimit hit again (BZ#2243011) * HPE Edgeline 920t resets during kdump context when ice driver is loaded and when system is booted with intel_iommu=on iommu=pt (BZ#2244625)
- References
-
- https://access.redhat.com/errata/RHSA-2023:7549
- https://access.redhat.com/security/cve/CVE-2022-45884
- https://access.redhat.com/security/cve/CVE-2022-45886
- https://access.redhat.com/security/cve/CVE-2022-45919
- https://access.redhat.com/security/cve/CVE-2023-1192
- https://access.redhat.com/security/cve/CVE-2023-2163
- https://access.redhat.com/security/cve/CVE-2023-3812
- https://access.redhat.com/security/cve/CVE-2023-5178
- https://bugzilla.redhat.com/2148510
- https://bugzilla.redhat.com/2148517
- https://bugzilla.redhat.com/2151956
- https://bugzilla.redhat.com/2154178
- https://bugzilla.redhat.com/2224048
- https://bugzilla.redhat.com/2240249
- https://bugzilla.redhat.com/2241924
- https://errata.almalinux.org/8/ALSA-2023-7549.html
Affected packages
AlmaLinux:8 / bpftool
Package
- Name
- bpftool
AlmaLinux:8 / kernel
Package
- Name
- kernel
AlmaLinux:8 / kernel-abi-stablelists
Package
- Name
- kernel-abi-stablelists
AlmaLinux:8 / kernel-core
Package
- Name
- kernel-core
AlmaLinux:8 / kernel-cross-headers
Package
- Name
- kernel-cross-headers
AlmaLinux:8 / kernel-debug
Package
- Name
- kernel-debug
AlmaLinux:8 / kernel-debug-core
Package
- Name
- kernel-debug-core
AlmaLinux:8 / kernel-debug-devel
Package
- Name
- kernel-debug-devel
AlmaLinux:8 / kernel-debug-modules
Package
- Name
- kernel-debug-modules
AlmaLinux:8 / kernel-debug-modules-extra
Package
- Name
- kernel-debug-modules-extra
AlmaLinux:8 / kernel-devel
Package
- Name
- kernel-devel
AlmaLinux:8 / kernel-doc
Package
- Name
- kernel-doc
AlmaLinux:8 / kernel-modules
Package
- Name
- kernel-modules
AlmaLinux:8 / kernel-modules-extra
Package
- Name
- kernel-modules-extra
AlmaLinux:8 / kernel-tools
Package
- Name
- kernel-tools
AlmaLinux:8 / kernel-tools-libs
Package
- Name
- kernel-tools-libs
AlmaLinux:8 / kernel-tools-libs-devel
Package
- Name
- kernel-tools-libs-devel
AlmaLinux:8 / kernel-zfcpdump
Package
- Name
- kernel-zfcpdump
AlmaLinux:8 / kernel-zfcpdump-core
Package
- Name
- kernel-zfcpdump-core
AlmaLinux:8 / kernel-zfcpdump-devel
Package
- Name
- kernel-zfcpdump-devel
AlmaLinux:8 / kernel-zfcpdump-modules
Package
- Name
- kernel-zfcpdump-modules
AlmaLinux:8 / kernel-zfcpdump-modules-extra
Package
- Name
- kernel-zfcpdump-modules-extra
AlmaLinux:8 / perf
Package
- Name
- perf