Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CentOS kernel patches stop crashes and unauthorized code
published 17 days ago
Summary
A number of flaws in the CentOS Linux kernel could let an attacker cause the system to crash or run malicious code, especially in network, storage and virtual machine components. Updating the affected kernel packages (kernel, kernel-core, kernel-debug, etc.) applies the fixes and restores normal safe operation. Install the latest kernel updates as soon as possible and reboot to apply them.
What to do
- Update centos bpftool to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-core to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-cross-headers to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-debug to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-debug-core to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-debug-devel to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-debug-modules to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-debug-modules-extra to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-debug-modules-internal to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-devel to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-headers to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-ipaclones-internal to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-modules to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-modules-extra to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-modules-internal to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-selftests-internal to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-tools to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-tools-libs to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos kernel-tools-libs-devel to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos perf to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update centos python3-perf to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update bpftool to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-core to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-cross-headers to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-debug to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-debug-core to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-debug-devel to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-debug-modules to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-debug-modules-extra to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-debug-modules-internal to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-devel to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-headers to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-ipaclones-internal to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-modules to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-modules-extra to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-modules-internal to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-selftests-internal to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-tools to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-tools-libs to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update kernel-tools-libs-devel to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update perf to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
- Update python3-perf to version 4.18.0-305.25.1.el8_4.tuxcare.els12.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS:8.4 | centos | bpftool |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-core |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-cross-headers |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-debug |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-debug-core |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-debug-devel |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-debug-modules |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-debug-modules-extra |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-debug-modules-internal |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-devel |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-headers |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-ipaclones-internal |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-modules |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-modules-extra |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-modules-internal |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-selftests-internal |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-tools |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-tools-libs |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | kernel-tools-libs-devel |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | perf |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | centos | python3-perf |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | bpftool |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-core |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-cross-headers |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-debug |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-debug-core |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-debug-devel |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-debug-modules |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-debug-modules-extra |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-debug-modules-internal |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-devel |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-headers |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-ipaclones-internal |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-modules |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-modules-extra |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-modules-internal |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-selftests-internal |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-tools |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-tools-libs |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | kernel-tools-libs-devel |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | perf |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
| TuxCare:CentOS:8.4 | – | python3-perf |
< 4.18.0-305.25.1.el8_4.tuxcare.els12 Fix: upgrade to 4.18.0-305.25.1.el8_4.tuxcare.els12
|
Original advisory text
kernel: Fix of 19 CVEs
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() {CVE-2023-6176}
- wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719}
- mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719}
- x86/sev: Check for user-space IOIO pointing to kernel space {CVE-2023-46813}
- x86/sev: Check IOBM for IOIO exceptions from user-space {CVE-2023-46813}
- x86/sev: Disable MMIO emulation from user mode {CVE-2023-46813}
- netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-4881}
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() {CVE-2023-4921}
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c {CVE-2023-42753}
- net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829}
- USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862}
- igb: set max size RX buffer when store bad packet is enabled {CVE-2023-45871}
- net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
- Fix double fget() in vhost_net_set_backend() {CVE-2023-1838}
- nvmet-tcp: Fix a possible UAF in queue intialization setup {CVE-2023-5178}
- drm/qxl: fix UAF on handle creation {CVE-2023-39198}
- net: add kerneldoc comment for sk_peer_lock {CVE-2021-4203}
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses {CVE-2021-4203}
- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern {CVE-2022-0494}
- media: ov519: add missing endpoint sanity checks {CVE-2020-11608}
- act_mirred: use the backlog for nested calls to mirred ingress {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth {CVE-2022-4269}
- inet: use bigger hash table for IP ID generation {CVE-2021-45486}
- net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" {CVE-2021-45486}
- wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719}
- mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719}
- x86/sev: Check for user-space IOIO pointing to kernel space {CVE-2023-46813}
- x86/sev: Check IOBM for IOIO exceptions from user-space {CVE-2023-46813}
- x86/sev: Disable MMIO emulation from user mode {CVE-2023-46813}
- netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-4881}
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() {CVE-2023-4921}
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c {CVE-2023-42753}
- net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829}
- USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862}
- igb: set max size RX buffer when store bad packet is enabled {CVE-2023-45871}
- net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
- Fix double fget() in vhost_net_set_backend() {CVE-2023-1838}
- nvmet-tcp: Fix a possible UAF in queue intialization setup {CVE-2023-5178}
- drm/qxl: fix UAF on handle creation {CVE-2023-39198}
- net: add kerneldoc comment for sk_peer_lock {CVE-2021-4203}
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses {CVE-2021-4203}
- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern {CVE-2022-0494}
- media: ov519: add missing endpoint sanity checks {CVE-2020-11608}
- act_mirred: use the backlog for nested calls to mirred ingress {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth {CVE-2022-4269}
- inet: use bigger hash table for IP ID generation {CVE-2021-45486}
- net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" {CVE-2021-45486}
References
- https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1701963303.html Vendor Advisory
- https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2023-1701963303.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-11608 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-4203 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-45486 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-0494 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-4269 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-42719 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-1829 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-1838 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39198 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-42753 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-45862 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-45871 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-4623 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-46813 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-4921 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-5178 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-52628 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-53179 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-6176 Vendor Advisory
Timeline
Published18 Oct 2026
Updated26 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2023-1701963303 · OSV
Track software like this
Free during beta