Open-Source Security Intelligence

Know every vulnerability
before it knows you.

DevGuard continuously monitors your dependencies and alerts you when CVEs like this one affect your stack — with real-time threat intelligence built for developers.

Checkout DevGuardView on GitHub
Search

RHSA-2023:2951

HighCVSS 7.8 / 10
Published Sep 13, 2024·Last modified May 12, 2026
Affected Components(0)

No affected components available

Description

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Risk Scores
Base Score
7.8

The vulnerability requires local access to the device to be exploited. It is easy for an attacker to exploit this vulnerability. An attacker needs basic access or low-level privileges. No user interaction is needed for the attacker to exploit this vulnerability. The impact is confined to the system where the vulnerability exists. There is a high impact on the confidentiality of the information. There is a high impact on the integrity of the data. There is a high impact on the availability of the system.

Threat Intelligence
7.1

Exploitation activity has been observed. Apply available patches or mitigations urgently.

EPSS
0.32%

The exploit probability is very low. The vulnerability is unlikely to be exploited in the next 30 days.

Exploit
Not available

We did not find any exploit available. Neither in GitHub repositories nor in the Exploit-Database.

Related Vulnerabilities
  • CVE-2021-26341
    Upstream
  • CVE-2021-33655
    Upstream
  • CVE-2021-33656
    Upstream
  • CVE-2021-47221
    Upstream
  • CVE-2021-47592
    Upstream
  • CVE-2022-1462
    Upstream
  • CVE-2022-1679
    Upstream
  • CVE-2022-1789
    Upstream
  • CVE-2022-20141
    Upstream
  • CVE-2022-2196
    Upstream
  • CVE-2022-25265
    Upstream
  • CVE-2022-2663
    Upstream
  • CVE-2022-3028

    A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.

    Upstream, EPSS 0.20%
  • CVE-2022-30594
    Upstream
  • CVE-2022-3239
    Upstream
  • CVE-2022-3522
    Upstream
  • CVE-2022-3524
    Upstream
  • CVE-2022-3564
    Upstream
  • CVE-2022-3566
    Upstream
  • CVE-2022-3567
    Upstream
  • CVE-2022-3619
    Upstream
  • CVE-2022-3623
    Upstream
  • CVE-2022-3625
    Upstream
  • CVE-2022-3628
    Upstream
  • CVE-2022-36879

    An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

    Upstream, EPSS 0.32%
  • CVE-2022-3707
    Upstream
  • CVE-2022-39188
    Upstream
  • CVE-2022-39189

    An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations.

    Upstream, EPSS 0.32%
  • CVE-2022-41218
    Upstream
  • CVE-2022-4129
    Upstream
  • CVE-2022-41674
    Upstream
  • CVE-2022-42703
    Upstream
  • CVE-2022-42720
    Upstream
  • CVE-2022-42721
    Upstream
  • CVE-2022-42722
    Upstream
  • CVE-2022-43750
    Upstream
  • CVE-2022-4662
    Upstream
  • CVE-2022-47929
    Upstream
  • CVE-2022-48695
    Upstream
  • CVE-2022-48696
    Upstream
  • CVE-2022-48701
    Upstream
  • CVE-2022-48883
    Upstream
  • CVE-2022-48884
    Upstream
  • CVE-2022-48992
    Upstream
  • CVE-2022-49010
    Upstream
  • CVE-2022-49114
    Upstream
  • CVE-2022-49294
    Upstream
  • CVE-2022-49319
    Upstream
  • CVE-2022-49323
    Upstream
  • CVE-2022-49328
    Upstream
  • CVE-2022-49330
    Upstream
  • CVE-2022-49333
    Upstream
  • CVE-2022-49339
    Upstream
  • CVE-2022-49365
    Upstream
  • CVE-2022-49371
    Upstream
  • CVE-2022-49372
    Upstream
  • CVE-2022-49376
    Upstream
  • CVE-2022-49416
    Upstream
  • CVE-2022-49429
    Upstream
  • CVE-2022-49471
    Upstream
  • CVE-2022-49511
    Upstream
  • CVE-2022-49513
    Upstream
  • CVE-2022-49519
    Upstream
  • CVE-2022-49539
    Upstream
  • CVE-2022-49545
    Upstream
  • CVE-2022-49577
    Upstream
  • CVE-2022-49583
    Upstream
  • CVE-2022-49592
    Upstream
  • CVE-2022-49636
    Upstream
  • CVE-2022-49642
    Upstream
  • CVE-2022-49644
    Upstream
  • CVE-2022-49646
    Upstream
  • CVE-2022-49653
    Upstream
  • CVE-2022-49663
    Upstream
  • CVE-2022-49691
    Upstream
  • CVE-2022-49723
    Upstream
  • CVE-2022-49726
    Upstream
  • CVE-2022-49732
    Upstream
  • CVE-2022-49872
    Upstream
  • CVE-2022-49908
    Upstream
  • CVE-2022-49925
    Upstream
  • CVE-2022-49934
    Upstream
  • CVE-2022-49935
    Upstream
  • CVE-2022-49936
    Upstream
  • CVE-2022-49942
    Upstream
  • CVE-2022-49951
    Upstream
  • CVE-2022-49958
    Upstream
  • CVE-2022-49959
    Upstream
  • CVE-2022-49960
    Upstream
  • CVE-2022-49962
    Upstream
  • CVE-2022-49964
    Upstream
  • CVE-2022-49965
    Upstream
  • CVE-2022-49966
    Upstream
  • CVE-2022-49969
    Upstream
  • CVE-2022-49971
    Upstream
  • CVE-2022-49982
    Upstream
  • CVE-2022-49983
    Upstream
  • CVE-2022-49986
    Upstream
  • CVE-2022-50000
    Upstream
  • CVE-2022-50001
    Upstream
  • CVE-2022-50002
    Upstream
  • CVE-2022-50007
    Upstream
  • CVE-2022-50015
    Upstream
  • CVE-2022-50016
    Upstream
  • CVE-2022-50022
    Upstream
  • CVE-2022-50035
    Upstream
  • CVE-2022-50037
    Upstream
  • CVE-2022-50039
    Upstream
  • CVE-2022-50041
    Upstream
  • CVE-2022-50044
    Upstream
  • CVE-2022-50048
    Upstream
  • CVE-2022-50049
    Upstream
  • CVE-2022-50050
    Upstream
  • CVE-2022-50052
    Upstream
  • CVE-2022-50068
    Upstream
  • CVE-2022-50070
    Upstream
  • CVE-2022-50079
    Upstream
  • CVE-2022-50093
    Upstream
  • CVE-2022-50100
    Upstream
  • CVE-2022-50111
    Upstream
  • CVE-2022-50113
    Upstream
  • CVE-2022-50127
    Upstream
  • CVE-2022-50129
    Upstream
  • CVE-2022-50130
    Upstream
  • CVE-2022-50133
    Upstream
  • CVE-2022-50135
    Upstream
  • CVE-2022-50136
    Upstream
  • CVE-2022-50137
    Upstream
  • CVE-2022-50138
    Upstream
  • CVE-2022-50149
    Upstream
  • CVE-2022-50164
    Upstream
  • CVE-2022-50172
    Upstream
  • CVE-2022-50181
    Upstream
  • CVE-2022-50185
    Upstream
  • CVE-2022-50189
    Upstream
  • CVE-2022-50211
    Upstream
  • CVE-2022-50221
    Upstream
  • CVE-2022-50226
    Upstream
  • CVE-2022-50229
    Upstream
  • CVE-2022-50235
    Upstream
  • CVE-2022-50243
    Upstream
  • CVE-2022-50271
    Upstream
  • CVE-2022-50299
    Upstream
  • CVE-2022-50308
    Upstream
  • CVE-2022-50318
    Upstream
  • CVE-2022-50325
    Upstream
  • CVE-2022-50350
    Upstream
  • CVE-2022-50381
    Upstream
  • CVE-2022-50408
    Upstream
  • CVE-2022-50410
    Upstream
  • CVE-2022-50418
    Upstream
  • CVE-2022-50425
    Upstream
  • CVE-2022-50427
    Upstream
  • CVE-2022-50431
    Upstream
  • CVE-2022-50467
    Upstream
  • CVE-2022-50482
    Upstream
  • CVE-2022-50484
    Upstream
  • CVE-2022-50487
    Upstream
  • CVE-2022-50493
    Upstream
  • CVE-2022-50496
    Upstream
  • CVE-2022-50516
    Upstream
  • CVE-2022-50531
    Upstream
  • CVE-2022-50534
    Upstream
  • CVE-2022-50543
    Upstream
  • CVE-2022-50549
    Upstream
  • CVE-2022-50554
    Upstream
  • CVE-2022-50563
    Upstream
  • CVE-2022-50569
    Upstream
  • CVE-2022-50583
    Upstream
  • CVE-2022-50615
    Upstream
  • CVE-2022-50671
    Upstream
  • CVE-2022-50678
    Upstream
  • CVE-2022-50698
    Upstream
  • CVE-2022-50714
    Upstream
  • CVE-2022-50715
    Upstream
  • CVE-2022-50723
    Upstream
  • CVE-2022-50726
    Upstream
  • CVE-2022-50744
    Upstream
  • CVE-2022-50752
    Upstream
  • CVE-2022-50768
    Upstream
  • CVE-2022-50773
    Upstream
  • CVE-2022-50863
    Upstream
  • CVE-2022-50866
    Upstream
  • CVE-2022-50889
    Upstream
  • CVE-2023-0394
    Upstream
  • CVE-2023-0461
    Upstream
  • CVE-2023-1095

    In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference.

    Upstream, EPSS 0.21%
  • CVE-2023-1195

    A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue occurs when it forgets to set the free pointer server->hostname to NULL, leading to an invalid pointer request.

    Upstream, EPSS 0.21%
  • CVE-2023-1582
    Upstream
  • CVE-2023-2177
    Upstream
  • CVE-2023-22998
    Upstream
  • CVE-2023-23454
    Upstream
  • CVE-2023-53064
    Upstream
  • CVE-2023-53273
    Upstream
  • CVE-2023-53393
    Upstream
  • CVE-2023-53549
    Upstream
  • CVE-2023-53552
    Upstream
  • CVE-2023-53811
    Upstream
  • EUVD-2021-13147
    Upstream
  • EUVD-2021-20332
    Upstream
  • EUVD-2021-20333
    Upstream
  • EUVD-2021-33869
    Upstream
  • EUVD-2021-34594
    Upstream
  • EUVD-2022-24767
    Upstream
  • EUVD-2022-24965
    Upstream
  • EUVD-2022-25069
    Upstream
  • EUVD-2022-25401
    Upstream
  • EUVD-2022-29962
    Upstream
  • EUVD-2022-34479
    Upstream
  • EUVD-2022-34909
    Upstream
  • EUVD-2022-39579
    Upstream
  • EUVD-2022-41733
    Upstream
  • EUVD-2022-41734
    Upstream
  • EUVD-2022-42462
    Upstream
  • EUVD-2022-42647
    Upstream
  • EUVD-2022-42891
    Upstream
  • EUVD-2022-42928
    Upstream
  • EUVD-2022-42930
    Upstream
  • EUVD-2022-42931
    Upstream
  • EUVD-2022-42979
    Upstream
  • EUVD-2022-42983
    Upstream
  • EUVD-2022-42985
    Upstream
  • EUVD-2022-42988
    Upstream
  • EUVD-2022-43064
    Upstream
  • EUVD-2022-44459
    Upstream
  • EUVD-2022-44860
    Upstream
  • EUVD-2022-45769
    Upstream
  • EUVD-2022-45786
    Upstream
  • EUVD-2022-45787
    Upstream
  • EUVD-2022-45788
    Upstream
  • EUVD-2022-46727
    Upstream
  • EUVD-2022-50665
    Upstream
  • EUVD-2022-51494
    Upstream
  • EUVD-2022-51986
    Upstream
  • EUVD-2022-52436
    Upstream
  • EUVD-2022-53574
    Upstream
  • EUVD-2022-53575
    Upstream
  • EUVD-2022-53580
    Upstream
  • EUVD-2022-53762
    Upstream
  • EUVD-2022-53763
    Upstream
  • EUVD-2022-53871
    Upstream
  • EUVD-2022-53894
    Upstream
  • EUVD-2022-54472
    Upstream
  • EUVD-2022-54478
    Upstream
  • EUVD-2022-54509
    Upstream
  • EUVD-2022-54512
    Upstream
  • EUVD-2022-54544
    Upstream
  • EUVD-2022-54570
    Upstream
  • EUVD-2022-54579
    Upstream
  • EUVD-2022-54586
    Upstream
  • EUVD-2022-54588
    Upstream
  • EUVD-2022-54590
    Upstream
  • EUVD-2022-54596
    Upstream
  • EUVD-2022-54640
    Upstream
  • EUVD-2022-54649
    Upstream
  • EUVD-2022-54655
    Upstream
  • EUVD-2022-54687
    Upstream
  • EUVD-2022-54692
    Upstream
  • EUVD-2022-54710
    Upstream
  • EUVD-2022-54716
    Upstream
  • EUVD-2022-54718
    Upstream
  • EUVD-2022-54758
    Upstream
  • EUVD-2022-54800
    Upstream
  • EUVD-2022-54813
    Upstream
  • EUVD-2022-54853
    Upstream
  • EUVD-2022-54857
    Upstream
  • EUVD-2022-54858
    Upstream
  • EUVD-2022-54864
    Upstream
  • EUVD-2022-54889
    Upstream
  • EUVD-2022-54895
    Upstream
  • EUVD-2022-54898
    Upstream
  • EUVD-2022-54904
    Upstream
  • EUVD-2022-54908
    Upstream
  • EUVD-2022-54932
    Upstream
  • EUVD-2022-55099
    Upstream
  • EUVD-2022-55192
    Upstream
  • EUVD-2022-55193
    Upstream
  • EUVD-2022-55194
    Upstream
  • EUVD-2022-55200
    Upstream
  • EUVD-2022-55207
    Upstream
  • EUVD-2022-55209
    Upstream
  • EUVD-2022-55216
    Upstream
  • EUVD-2022-55219
    Upstream
  • EUVD-2022-55224
    Upstream
  • EUVD-2022-55233
    Upstream
  • EUVD-2022-55240
    Upstream
  • EUVD-2022-55241
    Upstream
  • EUVD-2022-55242
    Upstream
  • EUVD-2022-55244
    Upstream
  • EUVD-2022-55246
    Upstream
  • EUVD-2022-55247
    Upstream
  • EUVD-2022-55251
    Upstream
  • EUVD-2022-55261
    Upstream
  • EUVD-2022-55262
    Upstream
  • EUVD-2022-55265
    Upstream
  • EUVD-2022-55279
    Upstream
  • EUVD-2022-55280
    Upstream
  • EUVD-2022-55281
    Upstream
  • EUVD-2022-55286
    Upstream
  • EUVD-2022-55292
    Upstream
  • EUVD-2022-55293
    Upstream
  • EUVD-2022-55306
    Upstream
  • EUVD-2022-55308
    Upstream
  • EUVD-2022-55310
    Upstream
  • EUVD-2022-55312
    Upstream
  • EUVD-2022-55315
    Upstream
  • EUVD-2022-55319
    Upstream
  • EUVD-2022-55320
    Upstream
  • EUVD-2022-55321
    Upstream
  • EUVD-2022-55323
    Upstream
  • EUVD-2022-55348
    Upstream
  • EUVD-2022-55359
    Upstream
  • EUVD-2022-55366
    Upstream
  • EUVD-2022-55377
    Upstream
  • EUVD-2022-55379
    Upstream
  • EUVD-2022-55393
    Upstream
  • EUVD-2022-55395
    Upstream
  • EUVD-2022-55396
    Upstream
  • EUVD-2022-55399
    Upstream
  • EUVD-2022-55401
    Upstream
  • EUVD-2022-55402
    Upstream
  • EUVD-2022-55403
    Upstream
  • EUVD-2022-55404
    Upstream
  • EUVD-2022-55415
    Upstream
  • EUVD-2022-55429
    Upstream
  • EUVD-2022-55437
    Upstream
  • EUVD-2022-55445
    Upstream
  • EUVD-2022-55449
    Upstream
  • EUVD-2022-55453
    Upstream
  • EUVD-2022-55473
    Upstream
  • EUVD-2022-55481
    Upstream
  • EUVD-2022-55484
    Upstream
  • EUVD-2022-55487
    Upstream
  • EUVD-2022-55509
    Upstream
  • EUVD-2022-55515
    Upstream
  • EUVD-2022-55530
    Upstream
  • EUVD-2022-55537
    Upstream
  • EUVD-2022-55547
    Upstream
  • EUVD-2022-55556
    Upstream
  • EUVD-2022-55584
    Upstream
  • EUVD-2022-55612
    Upstream
  • EUVD-2022-55659
    Upstream
  • EUVD-2022-55665
    Upstream
  • EUVD-2022-55697
    Upstream
  • EUVD-2022-55699
    Upstream
  • EUVD-2022-55727
    Upstream
  • EUVD-2022-55734
    Upstream
  • EUVD-2022-55763
    Upstream
  • EUVD-2022-55766
    Upstream
  • EUVD-2022-55774
    Upstream
  • EUVD-2022-55775
    Upstream
  • EUVD-2022-55788
    Upstream
  • EUVD-2022-55793
    Upstream
  • EUVD-2022-55809
    Upstream
  • EUVD-2022-55817
    Upstream
  • EUVD-2022-55832
    Upstream
  • EUVD-2022-55835
    Upstream
  • EUVD-2022-55907
    Upstream
  • EUVD-2023-12455
    Upstream
  • EUVD-2023-12515
    Upstream
  • EUVD-2023-23382
    Upstream
  • EUVD-2023-23475
    Upstream
  • EUVD-2023-23815
    Upstream
  • EUVD-2023-27098
    Upstream
  • EUVD-2023-27554
    Upstream
  • EUVD-2023-33694
    Upstream
  • EUVD-2023-59916
    Upstream
  • EUVD-2023-60095
    Upstream
  • EUVD-2025-12843
    Upstream
  • EUVD-2025-12865
    Upstream
  • EUVD-2025-12885
    Upstream
  • EUVD-2025-13190
    Upstream
  • EUVD-2025-205184
    Upstream
  • EUVD-2025-29883
    Upstream
  • EUVD-2025-29888
    Upstream
  • EUVD-2025-29897
    Upstream
  • EUVD-2025-29959
    Upstream
  • EUVD-2025-29984
    Upstream
  • EUVD-2025-31986
    Upstream
  • EUVD-2025-31987
    Upstream
  • EUVD-2025-32017
    Upstream
  • EUVD-2025-32023
    Upstream
  • EUVD-2025-32028
    Upstream
  • EUVD-2025-32039
    Upstream
  • EUVD-2025-32297
    Upstream
  • EUVD-2025-32304
    Upstream
  • EUVD-2025-32338
    Upstream
  • EUVD-2025-32343
    Upstream
  • EUVD-2025-32370
    Upstream
  • EUVD-2025-32379
    Upstream
  • EUVD-2025-32798
    Upstream
  • EUVD-2025-32833
    Upstream
  • EUVD-2025-32844
    Upstream
  • EUVD-2025-32866
    Upstream

Browse More

High severity
Scan your project

Continuously monitor your dependencies and get alerted when vulnerabilities like this one affect your stack.

Checkout DevGuard