Release bpftool-7.2.0-362.8.1.el9_3 ALSA-2023:6583

[maccelf]

kernel security, bug fix, and enhancement update Severity: important Description The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)
• kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route (CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)
• kernel: eBPF: insufficient stack type checks in dynptr (CVE-2023-39191)
• Kernel: race when faulting a device private page in memory manager (CVE-2022-3523)
• kernel: use-after-free in l1oip timer handlers (CVE-2022-3565)
• kernel: Rate limit overflow messages in r8152 in intr_callback (CVE-2022-3594)
• kernel: vmwgfx: use-after-free in vmw_cmd_res_check (CVE-2022-38457)
• kernel: vmwgfx: use-after-free in vmw_execbuf_tie_context (CVE-2022-40133)
• hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982)
• kernel: Information leak in l2cap_parse_conf_req in net/bluetooth/l2cap_core.c (CVE-2022-42895)
• kernel: x86/mm: Randomize per-cpu entry area (CVE-2023-0597)
• kernel: HID: check empty report_list in hid_validate_values() (CVE-2023-1073)
• kernel: sctp: fail if no bound addresses can be used for a given scope (CVE-2023-1074)
• kernel: hid: Use After Free in asus_remove() (CVE-2023-1079)
• kernel: hash collisions in the IPv6 connection lookup table (CVE-2023-1206)
• kernel: ovl: fix use after free in struct ovl_aio_req (CVE-2023-1252)
• Kernel: use-after-free in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (CVE-2023-1652)
• kernel: Use after free bug in btsdio_remove due to race condition (CVE-2023-1989)
• kernel: fbcon: shift-out-of-bounds in fbcon_set_font() (CVE-2023-3161)
• kernel: out-of-bounds access in relay_file_read (CVE-2023-3268)
• kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params() (CVE-2023-3772)
• kernel: xfrm: out-of-bounds read of XFRMA_MTIMER_THRESH nlattr (CVE-2023-3773)
• kernel: KVM: SEV-ES / SEV-SNP VMGEXIT double fetch vulnerability (CVE-2023-4155)
• kernel: exFAT: stack overflow in exfat_get_uniname_from_ext_entry (CVE-2023-4273)
• kernel: mpls: double free on sysctl allocation failure (CVE-2023-26545)
• kernel: KVM: nVMX: missing consistency checks for CR0 and CR4 (CVE-2023-30456)
• kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove() (CVE-2023-33203)
• kernel: vmwgfx: race condition leading to information disclosure vulnerability (CVE-2023-33951)
• kernel: vmwgfx: double free within the handling of vmw_buffer_object objects (CVE-2023-33952)
• kernel: r592: race condition leading to use-after-free in r592_remove() (CVE-2023-35825)
• kernel: net/tls: tls_is_tx_ready() checked list_entry (CVE-2023-1075)
• kernel: tap: tap_open(): correctly initialize socket uid (CVE-2023-1076)
• kernel: missing mmap_lock in file_files_note that could possibly lead to a use after free in the coredump code (CVE-2023-1249)
• kernel: use-after-free bug in remove function xgene_hwmon_remove (CVE-2023-1855)
• kernel: Use after free bug in r592_remove (CVE-2023-3141)
• kernel: gfs2: NULL pointer dereference in gfs2_evict_inode() (CVE-2023-3212)
• kernel: NULL pointer dereference due to missing kalloc() return value check in shtp_cl_get_dma_send_buf() (CVE-2023-3358)
• kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid (CVE-2023-4194)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Affected packages: bpftool-7.2.0-362.8.1.el9_3.x86_64 kernel-5.14.0-362.8.1.el9_3.x86_64 kernel-abi-stablelists-5.14.0-362.8.1.el9_3.noarch kernel-core-5.14.0-362.8.1.el9_3.x86_64 kernel-debug-5.14.0-362.8.1.el9_3.x86_64 kernel-debug-core-5.14.0-362.8.1.el9_3.x86_64 kernel-debug-devel-5.14.0-362.8.1.el9_3.x86_64 kernel-debug-devel-matched-5.14.0-362.8.1.el9_3.x86_64 kernel-debug-modules-5.14.0-362.8.1.el9_3.x86_64 kernel-debug-modules-core-5.14.0-362.8.1.el9_3.x86_64 kernel-debug-modules-extra-5.14.0-362.8.1.el9_3.x86_64 kernel-debug-uki-virt-5.14.0-362.8.1.el9_3.x86_64 kernel-devel-5.14.0-362.8.1.el9_3.x86_64 kernel-devel-matched-5.14.0-362.8.1.el9_3.x86_64 kernel-doc-5.14.0-362.8.1.el9_3.noarch kernel-headers-5.14.0-362.8.1.el9_3.x86_64 kernel-modules-5.14.0-362.8.1.el9_3.x86_64 kernel-modules-core-5.14.0-362.8.1.el9_3.x86_64 kernel-modules-extra-5.14.0-362.8.1.el9_3.x86_64 kernel-tools-5.14.0-362.8.1.el9_3.x86_64 kernel-tools-libs-5.14.0-362.8.1.el9_3.x86_64 kernel-uki-virt-5.14.0-362.8.1.el9_3.x86_64 perf-5.14.0-362.8.1.el9_3.x86_64 python3-perf-5.14.0-362.8.1.el9_3.x86_64 rtla-5.14.0-362.8.1.el9_3.x86_64 rv-5.14.0-362.8.1.el9_3.x86_64 bpftool-7.2.0-362.8.1.el9_3.s390x kernel-5.14.0-362.8.1.el9_3.s390x kernel-abi-stablelists-5.14.0-362.8.1.el9_3.noarch kernel-core-5.14.0-362.8.1.el9_3.s390x kernel-debug-5.14.0-362.8.1.el9_3.s390x kernel-debug-core-5.14.0-362.8.1.el9_3.s390x kernel-debug-devel-5.14.0-362.8.1.el9_3.s390x kernel-debug-devel-matched-5.14.0-362.8.1.el9_3.s390x kernel-debug-modules-5.14.0-362.8.1.el9_3.s390x kernel-debug-modules-core-5.14.0-362.8.1.el9_3.s390x kernel-debug-modules-extra-5.14.0-362.8.1.el9_3.s390x kernel-devel-5.14.0-362.8.1.el9_3.s390x kernel-devel-matched-5.14.0-362.8.1.el9_3.s390x kernel-doc-5.14.0-362.8.1.el9_3.noarch kernel-headers-5.14.0-362.8.1.el9_3.s390x kernel-modules-5.14.0-362.8.1.el9_3.s390x kernel-modules-core-5.14.0-362.8.1.el9_3.s390x kernel-modules-extra-5.14.0-362.8.1.el9_3.s390x kernel-tools-5.14.0-362.8.1.el9_3.s390x kernel-zfcpdump-5.14.0-362.8.1.el9_3.s390x kernel-zfcpdump-core-5.14.0-362.8.1.el9_3.s390x kernel-zfcpdump-devel-5.14.0-362.8.1.el9_3.s390x kernel-zfcpdump-devel-matched-5.14.0-362.8.1.el9_3.s390x kernel-zfcpdump-modules-5.14.0-362.8.1.el9_3.s390x kernel-zfcpdump-modules-core-5.14.0-362.8.1.el9_3.s390x kernel-zfcpdump-modules-extra-5.14.0-362.8.1.el9_3.s390x perf-5.14.0-362.8.1.el9_3.s390x python3-perf-5.14.0-362.8.1.el9_3.s390x rtla-5.14.0-362.8.1.el9_3.s390x rv-5.14.0-362.8.1.el9_3.s390x bpftool-7.2.0-362.8.1.el9_3.ppc64le kernel-5.14.0-362.8.1.el9_3.ppc64le kernel-abi-stablelists-5.14.0-362.8.1.el9_3.noarch kernel-core-5.14.0-362.8.1.el9_3.ppc64le kernel-debug-5.14.0-362.8.1.el9_3.ppc64le kernel-debug-core-5.14.0-362.8.1.el9_3.ppc64le kernel-debug-devel-5.14.0-362.8.1.el9_3.ppc64le kernel-debug-devel-matched-5.14.0-362.8.1.el9_3.ppc64le kernel-debug-modules-5.14.0-362.8.1.el9_3.ppc64le kernel-debug-modules-core-5.14.0-362.8.1.el9_3.ppc64le kernel-debug-modules-extra-5.14.0-362.8.1.el9_3.ppc64le kernel-devel-5.14.0-362.8.1.el9_3.ppc64le kernel-devel-matched-5.14.0-362.8.1.el9_3.ppc64le kernel-doc-5.14.0-362.8.1.el9_3.noarch kernel-headers-5.14.0-362.8.1.el9_3.ppc64le kernel-modules-5.14.0-362.8.1.el9_3.ppc64le kernel-modules-core-5.14.0-362.8.1.el9_3.ppc64le kernel-modules-extra-5.14.0-362.8.1.el9_3.ppc64le kernel-tools-5.14.0-362.8.1.el9_3.ppc64le kernel-tools-libs-5.14.0-362.8.1.el9_3.ppc64le perf-5.14.0-362.8.1.el9_3.ppc64le python3-perf-5.14.0-362.8.1.el9_3.ppc64le rtla-5.14.0-362.8.1.el9_3.ppc64le rv-5.14.0-362.8.1.el9_3.ppc64le kernel-rt-5.14.0-362.8.1.el9_3.x86_64 kernel-rt-core-5.14.0-362.8.1.el9_3.x86_64 kernel-rt-debug-5.14.0-362.8.1.el9_3.x86_64 kernel-rt-debug-core-5.14.0-362.8.1.el9_3.x86_64 kernel-rt-debug-devel-5.14.0-362.8.1.el9_3.x86_64 kernel-rt-debug-modules-5.14.0-362.8.1.el9_3.x86_64 kernel-rt-debug-modules-core-5.14.0-362.8.1.el9_3.x86_64 kernel-rt-debug-modules-extra-5.14.0-362.8.1.el9_3.x86_64 kernel-rt-devel-5.14.0-362.8.1.el9_3.x86_64 kernel-rt-modules-5.14.0-362.8.1.el9_3.x86_64 kernel-rt-modules-core-5.14.0-362.8.1.el9_3.x86_64 kernel-rt-modules-extra-5.14.0-362.8.1.el9_3.x86_64 bpftool-7.2.0-362.8.1.el9_3.aarch64 kernel-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-core-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-debug-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-debug-core-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-debug-devel-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-debug-devel-matched-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-debug-modules-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-debug-modules-core-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-debug-modules-extra-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-devel-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-devel-matched-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-modules-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-modules-core-5.14.0-362.8.1.el9_3.aarch64 kernel-64k-modules-extra-5.14.0-362.8.1.el9_3.aarch64 kernel-abi-stablelists-5.14.0-362.8.1.el9_3.noarch kernel-core-5.14.0-362.8.1.el9_3.aarch64 kernel-debug-5.14.0-362.8.1.el9_3.aarch64 kernel-debug-core-5.14.0-362.8.1.el9_3.aarch64 kernel-debug-devel-5.14.0-362.8.1.el9_3.aarch64 kernel-debug-devel-matched-5.14.0-362.8.1.el9_3.aarch64 kernel-debug-modules-5.14.0-362.8.1.el9_3.aarch64 kernel-debug-modules-core-5.14.0-362.8.1.el9_3.aarch64 kernel-debug-modules-extra-5.14.0-362.8.1.el9_3.aarch64 kernel-devel-5.14.0-362.8.1.el9_3.aarch64 kernel-devel-matched-5.14.0-362.8.1.el9_3.aarch64 kernel-doc-5.14.0-362.8.1.el9_3.noarch kernel-headers-5.14.0-362.8.1.el9_3.aarch64 kernel-modules-5.14.0-362.8.1.el9_3.aarch64 kernel-modules-core-5.14.0-362.8.1.el9_3.aarch64 kernel-modules-extra-5.14.0-362.8.1.el9_3.aarch64 kernel-tools-5.14.0-362.8.1.el9_3.aarch64 kernel-tools-libs-5.14.0-362.8.1.el9_3.aarch64 perf-5.14.0-362.8.1.el9_3.aarch64 python3-perf-5.14.0-362.8.1.el9_3.aarch64 rtla-5.14.0-362.8.1.el9_3.aarch64 rv-5.14.0-362.8.1.el9_3.aarch64 kernel-cross-headers-5.14.0-362.8.1.el9_3.x86_64 kernel-tools-libs-devel-5.14.0-362.8.1.el9_3.x86_64 libperf-5.14.0-362.8.1.el9_3.x86_64 kernel-cross-headers-5.14.0-362.8.1.el9_3.ppc64le kernel-tools-libs-devel-5.14.0-362.8.1.el9_3.ppc64le libperf-5.14.0-362.8.1.el9_3.ppc64le kernel-cross-headers-5.14.0-362.8.1.el9_3.aarch64 kernel-tools-libs-devel-5.14.0-362.8.1.el9_3.aarch64 libperf-5.14.0-362.8.1.el9_3.aarch64 kernel-cross-headers-5.14.0-362.8.1.el9_3.s390x libperf-5.14.0-362.8.1.el9_3.s390x

[maccelf]

Errata created in ALBS: https://build.almalinux.org/errata?id=ALSA-2023:6583&platform_id=9

[maccelf]

Find packages in Build: https://build.almalinux.org/build/3221

[maccelf]

Find packages in Build: https://build.almalinux.org/build/6099

[maccelf]

Find packages in Build: https://build.almalinux.org/build/2787

[maccelf]

Find packages in Build: https://build.almalinux.org/build/14069

[maccelf]

Find packages in Build: https://build.almalinux.org/build/5884

[maccelf]

Find packages in Build: https://build.almalinux.org/build/6656

[maccelf]

Find packages in Build: https://build.almalinux.org/build/6098

[maccelf]

Find packages in Build: https://build.almalinux.org/build/5855

[maccelf]

Find packages in Build: https://build.almalinux.org/build/6412

[maccelf]

Find packages in Build: https://build.almalinux.org/build/19289

[maccelf]

Find packages in Build: https://build.almalinux.org/build/6280

[maccelf]

Find packages in Build: https://build.almalinux.org/build/4679

[maccelf]

Find packages in Build: https://build.almalinux.org/build/7822

[maccelf]

Find packages in Build: https://build.almalinux.org/build/4932

[maccelf]

Find packages in Build: https://build.almalinux.org/build/8855

[maccelf]

Find packages in Build: https://build.almalinux.org/build/9771

[maccelf]

Find packages in Build: https://build.almalinux.org/build/3232

[maccelf]

Find packages in Build: https://build.almalinux.org/build/8286

[maccelf]

Find packages in Build: https://build.almalinux.org/build/6190

[maccelf]

Find packages in Build: https://build.almalinux.org/build/2046

[maccelf]

Find packages in Build: https://build.almalinux.org/build/6094

[maccelf]

Find packages in Build: https://build.almalinux.org/build/4628

[maccelf]

Find packages in Build: https://build.almalinux.org/build/9765

[maccelf]

Find packages in Build: https://build.almalinux.org/build/4949

[maccelf]

Find packages in Build: https://build.almalinux.org/build/5000

[maccelf]

Find packages in Build: https://build.almalinux.org/build/5996

[maccelf]

Find packages in Build: https://build.almalinux.org/build/7834

[maccelf]

Find packages in Build: https://build.almalinux.org/build/2043

[maccelf]

Find packages in Build: https://build.almalinux.org/build/8337

[maccelf]

Find packages in Build: https://build.almalinux.org/build/3901

[maccelf]

Find packages in Build: https://build.almalinux.org/build/6085

[maccelf]

Find packages in Build: https://build.almalinux.org/build/6091

[maccelf]

Find packages in Build: https://build.almalinux.org/build/2651

[maccelf]

Find packages in Build: https://build.almalinux.org/build/4830

[maccelf]

Find packages in Build: https://build.almalinux.org/build/6142

[maccelf]

Find packages in Build: https://build.almalinux.org/build/9814

[maccelf]

Find packages in Build: https://build.almalinux.org/build/7113

[maccelf]

Find packages in Build: https://build.almalinux.org/build/5994

[maccelf]

Find packages in Build: https://build.almalinux.org/build/20221

[maccelf]

Find packages in Build: https://build.almalinux.org/build/12951

[maccelf]

Find packages in Build: https://build.almalinux.org/build/6248

[maccelf]

Find packages in Build: https://build.almalinux.org/build/4607

[maccelf]

Find packages in Build: https://build.almalinux.org/build/16204

[maccelf]

Find packages in Build: https://build.almalinux.org/build/4389

[maccelf]

Find packages in Build: https://build.almalinux.org/build/2072

[maccelf]

Find packages in Build: https://build.almalinux.org/build/15893

[maccelf]

Find packages in Build: https://build.almalinux.org/build/7888

[maccelf]

Find packages in Build: https://build.almalinux.org/build/1998

[maccelf]

Find packages in Build: https://build.almalinux.org/build/8492