RHSA-2023:0856: Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: memory corruption in AX88179178A based USB ethernet device. (CVE-2022-2964) kernel: use-after-free caused by l2capreassemblesdu() in net/bluetooth/l2capcore.c (CVE-2022-3564) kernel: stack overflow in doprocdointvec and procskipspaces (CVE-2022-4378) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:0856?
The severity of RHSA-2023:0856 is categorized as moderate due to the potential for memory corruption leading to system instability.
How do I fix RHSA-2023:0856?
To fix RHSA-2023:0856, update your kernel packages to version 4.18.0-147.80.1.el8_1 or later.
What vulnerabilities are addressed in RHSA-2023:0856?
RHSA-2023:0856 addresses vulnerabilities including memory corruption in AX88179_178A based USB ethernet device and a use-after-free in Bluetooth handling.
Which systems are affected by RHSA-2023:0856?
Systems running kernel versions prior to 4.18.0-147.80.1.el8_1 are affected by RHSA-2023:0856.
Is RHSA-2023:0856 applicable to both x86_64 and ppc64le architectures?
Yes, RHSA-2023:0856 is applicable to both x86_64 and ppc64le architectures.