QID 243052

The kernel packages contain the linux kernel, the core of any linux operating system...Security Fix(es):

kernel: inactive elements in nft_pipapo_walk (cve-2023-6817).
Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation (cve-2024-0193).
Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination (cve-2024-0646).
Kernel: use-after-free in nft_verdict_dump due to a race between set gc and transaction (cve-2023-4244).
Kernel: a heap out-of-bounds write when function perf_read_group is called and sibling_list is smaller than its child's sibling_list (cve-2023-5717).
Kernel: null pointer dereference in nvmet_tcp_build_iovec (cve-2023-6356).
Kernel: null pointer dereference in nvmet_tcp_execute_request (cve-2023-6535).
Kernel: null pointer dereference in __nvmet_req_complete (cve-2023-6536).
Kernel: out-of-bounds read vulnerability in smbcalcsize (cve-2023-6606).
Kernel: oob access in smb2_dump_detail (cve-2023-6610).
Kernel: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (cve-2023-51042).

Red Hat enterprise linux for x86_64 9 x86_64.
Red hat enterprise linux for ibm z systems 9 s390x.
Red hat enterprise linux for power, little endian 9 ppc64le.
Red hat enterprise linux for real time 9 x86_64.
Red hat enterprise linux for real time for nfv 9 x86_64.
Red hat enterprise linux for arm 64 9 aarch64.
Red hat codeready linux builder for x86_64 9 x86_64.
Red hat codeready linux builder for power, little endian 9 ppc64le.
Red hat codeready linux builder for arm 64 9 aarch64.
Red hat codeready linux builder for ibm z systems 9 s390x.

Successful exploitation of this vulnerability could lead to a security breach or could affect integrity, availability, and confidentiality.