Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Red Hat Linux Kernel Security Update Exposes System to Unauthorized Access
published 2 years ago
Summary
A security update for the Linux kernel in Red Hat systems has been released to address a vulnerability that could allow unauthorized access to system resources. This update is recommended for all Red Hat Linux users to prevent potential security breaches. Apply the update as soon as possible to ensure the security of your system.
What to do
- Update redhat bpftool to version 0:4.18.0-147.83.1.el8_1.
- Update redhat bpftool-debuginfo to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-abi-whitelists to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-core to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-debug to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-debug-core to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-debug-debuginfo to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-debug-devel to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-debug-modules to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-debug-modules-extra to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-debuginfo to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-debuginfo-common-ppc64le to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-debuginfo-common-x86_64 to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-devel to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-doc to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-modules to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-modules-extra to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-tools to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-tools-debuginfo to version 0:4.18.0-147.83.1.el8_1.
- Update redhat kernel-tools-libs to version 0:4.18.0-147.83.1.el8_1.
- Update redhat perf to version 0:4.18.0-147.83.1.el8_1.
- Update redhat perf-debuginfo to version 0:4.18.0-147.83.1.el8_1.
- Update redhat python3-perf to version 0:4.18.0-147.83.1.el8_1.
- Update redhat python3-perf-debuginfo to version 0:4.18.0-147.83.1.el8_1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_e4s:8.1::baseos | redhat | bpftool |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | bpftool-debuginfo |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-abi-whitelists |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-core |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-debug |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-debug-core |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-debug-debuginfo |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-debug-devel |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-debug-modules |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-debug-modules-extra |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-debuginfo |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-debuginfo-common-ppc64le |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-debuginfo-common-x86_64 |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-devel |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-doc |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-modules |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-modules-extra |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-tools |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-tools-debuginfo |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | kernel-tools-libs |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | perf |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | perf-debuginfo |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | python3-perf |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
| Red Hat:rhel_e4s:8.1::baseos | redhat | python3-perf-debuginfo |
< 0:4.18.0-147.83.1.el8_1 Fix: upgrade to 0:4.18.0-147.83.1.el8_1
|
Original advisory text
Red Hat Security Advisory: kernel security update
References
- https://access.redhat.com/errata/RHSA-2023:3190 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2176192 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2178212 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3190.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-0461 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-0461 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-0461 Vendor Advisory
- https://github.com/torvalds/linux/commit/2c02d41d71f90a5168391b6a5f2954112ba2307... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-1390 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-1390 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-1390 Vendor Advisory
- https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5 Third Party Advisory
- https://infosec.exchange/@_mattata/109427999461122360 Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published13 Sep 2024
Updated1 May 2026
First seen1 May 2026
Sources
RHSA-2023:3190 · OSV
Track software like this
Free during beta