1. Home
  2. Security Advisories
  3. Rocky Linux
  4. RLSA-2023:4517

[RLSA-2023:4517] kernel security and bug fix update

Severity Important
Affected Packages 40
CVEs 6
Info Packages References Vulnerabilities

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896)

  • kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation (CVE-2023-1281)

  • kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter (CVE-2023-1829)

  • kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events (CVE-2023-2235)

  • kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)

  • kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • simultaneous writes to a page on xfs can result in zero-byte data (BZ#2184101)

  • Rocky Linux 8.4 - kernel: fix __clear_user() inline assembly constraints (BZ#2192602)

  • LPAR is crashed by Phyp when doing DLPAR CPU operations (BZ#2193375)

  • ice: ptp4l cpu usage spikes (BZ#2203285)

  • Kernel - Significant performance drop for getrandom system call when FIPS is enabled (compared to Rocky Linux 8.x for all x < 6.z) (BZ#2208127)

  • macvlan: backports from upstream (BZ#2209686)

  • Intel 8.9 BUG VROC: Pull VMD secondary bus reset patch (BZ#2211198)

  • Incorrect target abort handling causes iscsi deadlock (BZ#2211494)

  • swap deadlock when attempt to charge a page to a cgroup stalls waiting on I/O plugged on another task in swap code (BZ#2211513)

  • BUG_ON "kernel BUG at mm/rmap.c:1041!" in __page_set_anon_rmap() when vma->anon_vma==NULL (BZ#2211658)

  • Rocky Linux 8.9: IPMI updates and bug fixes (BZ#2211667)

  • Rocky Linux 8.6 opening console with mkvterm on novalink terminal fails due to drmgr reporting failure (L3:) (BZ#2212373)

  • Rocky Linux 8.8 - P10 DD2.0: Wrong numa_node is assigned to vpmem device (BZ#2212451)

  • Rocky Linux 8.8 beta: Occasional stall during initialization of ipmi_msghandler (BZ#2213189)

  • ESXi Rocky Linux 8: Haswell generation CPU are impacted with performance due to IBRS (BZ#2213366)

  • xen: fix section mismatch error with xen_callback_vector() and alloc_intr_gate() (BZ#2214281)

  • jitter: Fix RCT/APT health test during initialization (BZ#2215079)

  • aacraid misses interrupts when a CPU is disabled resulting in scsi timeouts and the adapter being unusable until reboot. (BZ#2216498)

  • Hyper-V Rocky Linux 8: Fix VM crash/hang Issues due to fast VF add/remove events (BZ#2216543)

  • rbd: avoid fast-diff corruption in snapshot-based mirroring 8.9

  • Regression of 3b8cc6298724 ("blk-cgroup: Optimize blkcg_rstat_flush()") (BZ#2220810)

Package Affected Version
pkg:rpm/rockylinux/python3-perf?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/python3-perf?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/perf?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/perf?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-tools?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-tools?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-tools-libs?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-tools-libs?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-tools-libs-devel?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-tools-libs-devel?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-modules?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-modules?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-modules-extra?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-modules-extra?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-headers?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-headers?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-doc?arch=noarch&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-devel?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-devel?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-debuginfo-common-x86_64?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-debuginfo-common-aarch64?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-debug?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-debug?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-debug-modules?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-debug-modules?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-debug-modules-extra?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-debug-modules-extra?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-debug-devel?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-debug-devel?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-debug-core?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-debug-core?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-cross-headers?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-cross-headers?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-core?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-core?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/kernel-abi-stablelists?arch=noarch&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/bpftool?arch=x86_64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
pkg:rpm/rockylinux/bpftool?arch=aarch64&distro=rockylinux-8.8 < 4.18.0-477.21.1.el8_8
ID
RLSA-2023:4517
Severity
important
URL
https://errata.rockylinux.org/RLSA-2023:4517
Published
2023-10-06T23:10:01
(11 months ago)
Modified
2023-10-06T23:11:38
(11 months ago)
Rights
Copyright 2024 Rocky Enterprise Software Foundation
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/rockylinux/python3-perf?arch=x86_64&distro=rockylinux-8.8 rockylinux python3-perf < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/python3-perf?arch=aarch64&distro=rockylinux-8.8 rockylinux python3-perf < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/perf?arch=x86_64&distro=rockylinux-8.8 rockylinux perf < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/perf?arch=aarch64&distro=rockylinux-8.8 rockylinux perf < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-tools?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-tools < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-tools?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-tools < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-tools-libs?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-tools-libs < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-tools-libs?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-tools-libs < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-tools-libs-devel?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-tools-libs-devel < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-tools-libs-devel?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-tools-libs-devel < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-modules?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-modules < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-modules?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-modules < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-modules-extra?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-modules-extra < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-modules-extra?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-modules-extra < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-headers?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-headers < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-headers?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-headers < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-doc?arch=noarch&distro=rockylinux-8.8 rockylinux kernel-doc < 4.18.0-477.21.1.el8_8 rockylinux-8.8 noarch
Affected pkg:rpm/rockylinux/kernel-devel?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-devel < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-devel?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-devel < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-debuginfo-common-x86_64?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-debuginfo-common-x86_64 < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-debuginfo-common-aarch64?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-debuginfo-common-aarch64 < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-debug?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-debug < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-debug?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-debug < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-debug-modules?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-debug-modules < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-debug-modules?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-debug-modules < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-debug-modules-extra?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-debug-modules-extra < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-debug-modules-extra?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-debug-modules-extra < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-debug-devel?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-debug-devel < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-debug-devel?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-debug-devel < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-debug-core?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-debug-core < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-debug-core?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-debug-core < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-cross-headers?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-cross-headers < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-cross-headers?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-cross-headers < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-core?arch=x86_64&distro=rockylinux-8.8 rockylinux kernel-core < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/kernel-core?arch=aarch64&distro=rockylinux-8.8 rockylinux kernel-core < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
Affected pkg:rpm/rockylinux/kernel-abi-stablelists?arch=noarch&distro=rockylinux-8.8 rockylinux kernel-abi-stablelists < 4.18.0-477.21.1.el8_8 rockylinux-8.8 noarch
Affected pkg:rpm/rockylinux/bpftool?arch=x86_64&distro=rockylinux-8.8 rockylinux bpftool < 4.18.0-477.21.1.el8_8 rockylinux-8.8 x86_64
Affected pkg:rpm/rockylinux/bpftool?arch=aarch64&distro=rockylinux-8.8 rockylinux bpftool < 4.18.0-477.21.1.el8_8 rockylinux-8.8 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date