Linux · Security advisory · October 6, 2023

RXSA-2023:5244: kernel security update

RXSA-2023:5244, released October 6, 2023, fixes 8 CVEs in kernel (version 0:4.18.0-477.27.1.el8_8.cloud). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
8
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0507
92nd percentile

Priority of the 8 CVEs

Patch now 0 Urgent 0 High 8 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelrocky 80:4.18.0-477.27.1.el8_8.cloud

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-20593 amd64-microcode: An issue in “Zen 2” CPUs, under specific microarchitectural circumstances,may allow an attacker to potentially access... 7.8 0.0507 None reported
High CVE-2023-35001 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... 7.8 0.0154 None reported
High CVE-2023-2002 kernel-zfcpdump-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... 7.8 0.0147 None reported
High CVE-2023-4004 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... 7.8 0.0092 None reported
High CVE-2023-3390 linux: A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c 7.8 0.0091 None reported
High CVE-2023-35788 linux: An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7 7.8 0.0052 None reported
High CVE-2023-3776 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... 7.8 0.0051 None reported
High CVE-2023-3090 kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... 7.8 0.0048 None reported
Showing 1 to 8 of 8 1