KernelCare Directory

kernel-4.18.0-372.26.1.el8_6 (almalinux8)
Kernel Update Version: 4.18.0-513.18.2.el8_9
Build Date: 2024-04-10 11:17:00
Release Date: 2024-04-12 10:31:50
Release: K20240410_08

CVE-2022-2588, CVSSv2 Score: 6.7
Description:
UBUNTU: SAUCE: net_sched: cls_route: remove from list when handle is 0
CVE: https://access.redhat.com/security/cve/cve-2022-2588
Patch: ubuntu-bionic/4.15.0-191.202/CVE-2022-2588-UBUNTU-SAUCE-net_sched-cls_route-remove-from-list-when-handle-is-0.patch
From: kernel-4.15.0-191.202

CVE-2022-1353, CVSSv2 Score: 7.1
Description:
af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register
CVE: https://nvd.nist.gov/vuln/detail/CVE-2022-1353
Patch: 5.10.0/CVE-2022-1353-af_key-add-__GFP_ZERO-flag-for-compose_sadb_supported-in-function-pfkey_register.patch
From: 5.10.113-1

CVE-2022-0494, CVSSv2 Score: 4.4
Description:
block-map: add __GFP_ZERO flag for alloc_page in function
CVE: https://access.redhat.com/security/cve/CVE-2022-0494
Patch: 5.4.0/CVE-2022-0494-block-map-add-__GFP_ZERO-for-alloc_page-in-bio_copy_kern.patch
From: kernel-5.4.196-108.356.amzn2

CVE-2021-3640, CVSSv2 Score: 6.7
Description:
Fix lock_sock() blockage by memcpy_from_msg()
CVE: https://security-tracker.debian.org/tracker/CVE-2021-3640
Patch: 4.19.0/CVE-2021-3640.patch
From: <= linux-4.19.208-1

CVE-2022-1055, CVSSv2 Score: 6.3
Description:
net: sched: fix use-after-free in tc_new_tfilter()
CVE: https://access.redhat.com/security/cve/CVE-2022-1055
Patch: 4.18.0/CVE-2022-1055-net-sched-fix-use-after-free-in-tc_new_tfilter.patch
From: 4.18.0-425.3.1.el8

CVE-2022-28390, CVSSv2 Score: 7.8
Description:
fix double dev_kfree_skb() in error path
CVE: https://access.redhat.com/security/cve/CVE-2022-28390
Patch: 4.14.0/CVE-2022-28390.patch
From: >kernel-4.14.276-211.499.amzn2

CVE-2022-20368, CVSSv2 Score: 7.8
Description:
net/packet: fix slab-out-of-bounds access in packet_recvmsg()
CVE: https://access.redhat.com/security/cve/cve-2022-20368
Patch: 4.18.0/CVE-2022-20368-net-packet-fix-slab-out-of-bounds-access-in-packet_recvmsg.patch
From: 4.18.0-425.3.1.el8

CVE-2022-28893, CVSSv2 Score: 7.8
Description:
SUNRPC: Ensure we flush any closed sockets before
CVE: https://access.redhat.com/security/cve/CVE-2022-28893
Patch: 4.18.0/CVE-2022-28893-SUNRPC-Ensure-we-flush-any-closed-sockets-before.patch
From: 4.18.0-425.3.1.el8

CVE-2022-28893, CVSSv2 Score: 7.8
Description:
[PATCH] SUNRPC: Don't leak sockets in xs_local_connect()
CVE: https://people.canonical.com/~ubuntu-security/cve/2022/CVE-2022-28893
Patch: ubuntu-focal/5.4.0-124.140/0003-CVE-2022-28893-SUNRPC-Don-t-leak-sockets-in-xs_local_connect.patch
From: 5.4.0-124.140

CVE-2022-29581, CVSSv2 Score: 7.8
Description:
net/sched: cls_u32: fix netns refcount changes in u32_change()
CVE: https://access.redhat.com/security/cve/CVE-2022-29581
Patch: 4.18.0/CVE-2022-29581-cls_u32-fix-netns-refcount-changes-in-u32_change.patch
From: 4.18.0-425.3.1.el8

CVE-2022-36946, CVSSv2 Score: 7.5
Description:
netfilter: nf_queue: do not allow packet truncation below transport header offset
CVE: https://ubuntu.com/security/CVE-2022-36946
Patch: 4.4.0/CVE-2022-36946-netfilter-nf_queue-do-not-allow-packet-truncation-below-transport-header-offset.patch
From: 4.15.0-192.203~16.04.1

CVE-2020-36516, CVSSv2 Score: 5.9
Description:
ipv4: avoid using shared IP generator for connected sockets
CVE: https://access.redhat.com/security/cve/CVE-2020-36516
Patch: 5.4.17/CVE-2020-36516-ipv4-avoid-using-shared-IP-generator-for-connected-sockets.patch
From: 5.4.17-2136.306.1.3

CVE-2020-36516, CVSSv2 Score: 5.9
Description:
ipv4: tcp: send zero IPID in SYNACK messages
CVE: https://access.redhat.com/security/cve/CVE-2020-36516
Patch: 5.4.17/CVE-2020-36516-ipv4-tcp-send-zero-IPID-in-SYNACK-messages.patch
From: 5.4.17-2136.306.1.3

CVE-2020-36558, CVSSv2 Score: 5.1
Description:
vt: vt_ioctl: fix race in VT_RESIZEX
CVE: https://linux.oracle.com/cve/CVE-2020-36558.html
Patch: 4.1.12/CVE-2020-36558-vt-vt_ioctl-fix-race-in-VT_RESIZEX.patch
From: 4.1.12-124.66.3.el7uek

CVE-2021-30002, CVSSv2 Score: 6.2
Description:
media: v4l: ioctl: Fix memory leak in video_usercopy
CVE: https://people.canonical.com/~ubuntu-security/cve/2021/CVE-2021-30002
Patch: ubuntu-focal/5.4.0-73.82/0001-CVE-2021-30002-media-v4l-ioctl-Fix-memory-leak-in-video_usercopy.patch
From: 5.4.0-73.82

CVE-2022-0168, CVSSv2 Score: 4.4
Description:
cifs: prevent bad output lengths in smb2_ioctl_query_info()
CVE: https://nvd.nist.gov/vuln/detail/CVE-2022-0168
Patch: 5.10.0/CVE-2022-0168-cifs-prevent-bad-output-lengths-in-smb2_ioctl_query_info.patch
From: 5.10.113-1

CVE-2022-0168, CVSSv2 Score: 4.4
Description:
cifs: fix NULL ptr dereference in smb2_ioctl_query_info()
CVE: https://nvd.nist.gov/vuln/detail/CVE-2022-0168
Patch: 5.10.0/CVE-2022-0168-cifs-fix-NULL-ptr-dereference-in-smb2_ioctl_query_info.patch
From: 5.10.113-1

CVE-2022-0617, CVSSv2 Score: 4.7
Description:
udf: Fix NULL ptr deref when converting from inline format
CVE: https://access.redhat.com/security/cve/CVE-2022-0617
Patch: 4.14.0/CVE-2022-0617-udf-Fix-NULL-ptr-deref-when-converting-from-inline-format.patch
From: 4.14.268-205.500.amzn2

CVE-2022-0617, CVSSv2 Score: 4.7
Description:
udf: Restore i_lenAlloc when inode expansion fails
CVE: https://access.redhat.com/security/cve/CVE-2022-0617
Patch: 4.14.0/CVE-2022-0617-udf-Restore-i_lenAlloc-when-inode-expansion-fails.patch
From: 4.14.268-205.500.amzn2

CVE-2022-0854, CVSSv2 Score: 5.5
Description:
Reinstate some of "swiotlb: rework "fix info leak with
CVE: https://security-tracker.debian.org/tracker/CVE-2022-0854
Patch: 4.18.0/CVE-2022-0854-Reinstate-some-of-swiotlb-rework-fix-info-leak-with.patch
From: 5.10.120-1

CVE-2022-1184, CVSSv2 Score: 5.5
Description:
ext4: verify dir block before splitting it
CVE: https://access.redhat.com/security/cve/CVE-2022-1184
Patch: 4.14.0/CVE-2022-1184-ext4-verify-dir-block-before-splitting-it.patch
From: 4.14.285-215.501.amzn2

CVE-2022-1184, CVSSv2 Score: 5.5
Description:
ext4: make variable "count" signed
CVE: https://access.redhat.com/security/cve/CVE-2022-1184
Patch: 4.14.0/CVE-2022-1184-ext4-make-variable-count-signed.patch
From: 4.14.285-215.501.amzn2

CVE-2022-1184, CVSSv2 Score: 5.5
Description:
ext4: avoid cycles in directory h-tree
CVE: https://access.redhat.com/security/cve/CVE-2022-1184
Patch: 4.14.0/CVE-2022-1184-ext4-avoid-cycles-in-directory-h-tree.patch
From: 4.14.285-215.501.amzn2

CVE-2022-2938, CVSSv2 Score: 7.8
Description:
psi: Fix uaf issue when psi trigger is destroyed while being polled (adaptation)
CVE: https://access.redhat.com/security/cve/cve-2022-2938
Patch: 4.18.0/CVE-2022-2938-kpatch.patch
From: 4.18.0-425.3.1.el8

CVE-2022-1048, CVSSv2 Score: 7.0
Description:
ALSA: pcm: Fix races among concurrent read/write and buffer changes
CVE: https://nvd.nist.gov/vuln/detail/CVE-2022-1048
Patch: 5.4.17/CVE-2022-1048-ALSA-pcm-Fix-races-among-concurrent-read-write-and-buffer-changes.patch
From: 5.10.113-1

CVE-2022-1048, CVSSv2 Score: 7.0
Description:
ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
CVE: https://nvd.nist.gov/vuln/detail/CVE-2022-1048
Patch: 5.10.0/CVE-2022-1048-ALSA-pcm-Fix-races-among-concurrent-prepare-and-hw_params-hw_free-calls.patch
From: 5.10.113

CVE-2022-1048, CVSSv2 Score: 7.0
Description:
ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
CVE: https://nvd.nist.gov/vuln/detail/CVE-2022-1048
Patch: 5.15.0/CVE-2022-1048-ALSA-pcm-Fix-races-among-concurrent-hw_params-and-hw_free-calls.patch
From: 5.15.37-39

CVE-2022-1048, CVSSv2 Score: 7.0
Description:
ALSA: pcm: Fix races among concurrent prealloc proc writes
CVE: https://nvd.nist.gov/vuln/detail/CVE-2022-1048
Patch: 5.15.0/CVE-2022-1048-ALSA-pcm-Fix-races-among-concurrent-prealloc-proc-writes.patch
From: 5.15.37-39

CVE-2022-1048, CVSSv2 Score: 7.0
Description:
ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (adaptation)
CVE: https://nvd.nist.gov/vuln/detail/CVE-2022-1048
Patch: 4.18.0/CVE-2022-1048-kpatch-372.patch
From: 5.10.113

CVE-2022-2639, CVSSv2 Score: 7.8
Description:
openvswitch: fix OOB access in reserve_sfa_size()
CVE: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-2639
Patch: 4.18.0/CVE-2022-2639-openvswitch-fix-OOB-access-in-reserve_sfa_size.patch
From: 4.18.0-372.26.1

CVE-2022-1016, CVSSv2 Score: 5.5
Description:
Initialize registers to avoid stack leak into userspace.
CVE: https://access.redhat.com/security/cve/cve-2022-1016
Patch: 4.18.0/CVE-2022-1016.patch
From: >kernel-4.18.0-348.20.1.el8_5

CVE-2022-1015, CVSSv2 Score: 6.6
Description:
Bail out in case userspace uses unsupported registers.
CVE: https://access.redhat.com/security/cve/cve-2022-1015
Patch: 4.18.0/CVE-2022-1015.patch
From: >kernel-4.18.0-348.20.1.el8_5

CVE-2022-1852, CVSSv2 Score: 5.5
Description:
KVM: x86: avoid calling x86 emulator without a decoded
CVE: https://security-tracker.debian.org/tracker/CVE-2022-1852
Patch: 4.18.0/CVE-2022-1852-KVM-x86-avoid-calling-x86-emulator-without-a-decoded.patch
From: 4.18.0-425.3.1.el8

CVE-2022-2078, CVSSv2 Score: 5.3
Description:
netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
CVE: https://security-tracker.debian.org/tracker/CVE-2022-2078
Patch: 4.18.0/CVE-2022-2078-netfilter-nf_tables-sanitize-nft_set_desc_concat_parse.patch
From: 4.18.0-425.3.1.el8

CVE-2022-23960, CVSSv2 Score:
Description:
Out of scope as the patch is aarch64 related
CVE:
Patch: skipped/CVE-2022-23960.patch
From:

CVE-2022-24448, CVSSv2 Score: 3.3
Description:
NFSv4: Handle case where the lookup of a directory fails
CVE: https://access.redhat.com/security/cve/CVE-2022-24448
Patch: 4.14.0/CVE-2022-24448-NFSv4-Handle-case-where-the-lookup-of-a-directory-fails.patch
From: 4.14.268-205.500.amzn2

CVE-2022-2586, CVSSv2 Score: 6.7
Description:
netfilter: nf_tables: do not allow SET_ID to refer to another
CVE: https://linux.oracle.com/cve/CVE-2022-2586.html
Patch: 5.4.17/CVE-2022-2586-0001-netfilter-nf_tables-do-not-allow-SET_ID-to-refer-to.patch
From: 5.4.17-2136.311.6.el8uek

CVE-2022-2586, CVSSv2 Score: 6.7
Description:
netfilter: nf_tables: do not allow SET_ID to refer to another
CVE: https://linux.oracle.com/cve/CVE-2022-2586.html
Patch: 5.4.17/CVE-2022-2586-0002-netfilter-nf_tables-do-not-allow-RULE_ID-to-refer-to.patch
From: 5.4.17-2136.311.6.el8uek

CVE-2022-27950, CVSSv2 Score: 5.5
Description:
HID: elo: fix memory leak in elo_probe
CVE: https://security-tracker.debian.org/tracker/CVE-2022-27950
Patch: 4.18.0/CVE-2022-27950-hid-elo-fix-memory-leak-in-elo_probe.patch
From: 4.18.0-425.3.1.el8

CVE-2022-21499, CVSSv2 Score: 6.7
Description:
lockdown: also lock down previous kgdb use
CVE: https://security-tracker.debian.org/tracker/CVE-2022-21499
Patch: 4.18.0/CVE-2022-21499-lockdown-also-lock-down-previous-kgdb-use.patch
From: 4.18.0-425.3.1.el8

CVE-2022-4139, CVSSv2 Score: 7.0
Description:
drm/i915: fix TLB invalidation for Gen12 video and compute
CVE: https://access.redhat.com/security/cve/CVE-2022-4139
Patch: 4.18.0/CVE-2022-4139-drm-i915-fix-TLB-invalidation-for-Gen12-video-and-co-pre-425.patch
From: 4.18.0-425.10.1.el8_7

CVE-2022-2964, CVSSv2 Score: 7.8
Description:
net: usb: ax88179_178a: Fix out-of-bounds accesses in RX
CVE: https://access.redhat.com/security/cve/CVE-2022-2964
Patch: 4.18.0/CVE-2022-2964-net-usb-ax88179_178a-Fix-out-of-bounds-accesses-in-R.patch
From: 4.18.0-425.10.1.el8_7

CVE-2022-2873, CVSSv2 Score: 5.5
Description:
i2c: ismt: prevent memory corruption in ismt_access()
CVE: https://access.redhat.com/security/cve/CVE-2022-2873
Patch: rhel8/4.18.0-425.13.1.el8_7/CVE-2022-2873-i2c-ismt-prevent-memory-corruption-in-ismt-access.patch
From: 4.18.0-425.13.1.el8_7

CVE-2022-41222, CVSSv2 Score: 7.0
Description:
mm/mremap: hold the rmap lock in write mode when moving page table
CVE: https://access.redhat.com/security/cve/CVE-2022-41222
Patch: rhel8/4.18.0-425.13.1.el8_7/CVE-2022-41222-mm-mremap-hold-the-rmap-lock-in-write-mode-when-moving-page-table.patch
From: 4.18.0-425.13.1.el8_7

CVE-2022-4269, CVSSv2 Score: 5.5
Description:
act_mirred: use the backlog for nested calls to
CVE: https://access.redhat.com/security/cve/CVE-2022-4269
Patch: rhel8/4.18.0-425.19.2.el8_7/CVE-2022-4269-act_mirred-use-the-backlog-for-nested-calls-to-mirre.patch
From: 4.18.0-425.19.2.el8_7

CVE-2022-4378, CVSSv2 Score: 7.8
Description:
proc: avoid integer type confusion in get_proc_long
CVE: https://access.redhat.com/security/cve/CVE-2022-4378
Patch: rhel8/4.18.0-425.19.2.el8_7/CVE-2022-4378-0001-proc-avoid-integer-type-confusion-in-get_proc_long.patch
From: 4.18.0-425.19.2.el8_7

CVE-2022-4378, CVSSv2 Score: 7.8
Description:
proc: proc_skip_spaces() shouldn't think it is working on C strings
CVE: https://access.redhat.com/security/cve/CVE-2022-4378
Patch: rhel8/4.18.0-425.19.2.el8_7/CVE-2022-4378-0002-proc-proc_skip_spaces-shouldn-t-think-it-is-working-.patch
From: 4.18.0-425.19.2.el8_7

CVE-2023-0266, CVSSv2 Score: 7.8
Description:
ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
CVE: https://access.redhat.com/security/cve/CVE-2023-2066
Patch: rhel8/4.18.0-425.19.2.el8_7/CVE-2023-0266-ALSA-pcm-Move-rwsem-lock-inside-snd_ctl_elem_read-to.patch
From: 4.18.0-425.19.2.el8_7

CVE-2023-0386, CVSSv2 Score: 7.0
Description:
ovl: fail on invalid uid/gid mapping at copy up
CVE: https://access.redhat.com/security/cve/CVE-2023-0386
Patch: rhel8/4.18.0-425.19.2.el8_7/CVE-2023-0386-ovl-fail-on-invalid-uid-gid-mapping-at-copy-up.patch
From: 4.18.0-425.19.2.el8_7

CVE-2022-41674, CVSSv2 Score: 7.3
Description:
wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans()
CVE: https://access.redhat.com/security/cve/CVE-2022-41674
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-41674-wifi-cfg80211-fix-u8-overflow-in-cfg80211_update_notlisted_nontrans.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-1679, CVSSv2 Score: 7.0
Description:
ath9k: fix use-after-free in ath9k_hif_usb_rx_cbMIME-Version: 1.0
CVE: https://access.redhat.com/security/cve/CVE-2022-1679
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-1679-ath9k-fix-use-after-free-in-ath9k_hif_usb_rx_cb.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-3239, CVSSv2 Score: 7.0
Description:
media: em28xx: initialize refcount before kref_get
CVE: https://access.redhat.com/security/cve/CVE-2022-3239
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-3239-media-em28xx-initialize-refcount-before-kref_get.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-3625, CVSSv2 Score: 7.8
Description:
devlink: Fix use-after-free after a failed reload
CVE: https://access.redhat.com/security/cve/CVE-2022-3625
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-3625-devlink-Fix-use-after-free-after-a-failed-reload.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-30594, CVSSv2 Score: 5.5
Description:
ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
CVE: https://access.redhat.com/security/cve/CVE-2022-30594
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-30594-ptrace-Check-PTRACE_O_SUSPEND_SECCOMP-permission-on-PTRACE_SEIZE.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-25265, CVSSv2 Score: 7.8
Description:
x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit
CVE: https://access.redhat.com/security/cve/CVE-2022-25265
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-25265-0810-x86-elf-Disable-automatic-READ_IMPLIES_EXEC-on-64-bi.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-20141, CVSSv2 Score: 7.0
Description:
igmp: Add ip_mc_list lock in ip_check_mc_rcu
CVE: https://access.redhat.com/security/cve/CVE-2022-20141
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-20141-igmp-Add-ip_mc_list-lock-in-ip_check_mc_rcu.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-3028, CVSSv2 Score: 7.0
Description:
af_key: Do not call xfrm_probe_algs in parallel
CVE: https://access.redhat.com/security/cve/CVE-2022-3028
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-3028-af_key-Do-not-call-xfrm_probe_algs-in-parallel.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-3564, CVSSv2 Score: 7.1
Description:
Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
CVE: https://access.redhat.com/security/cve/CVE-2022-3564
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-3564-Bluetooth-L2CAP-Fix-use-after-free-caused-by-l2cap_reassemble_sdu.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-3623, CVSSv2 Score: 7.5
Description:
mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page
CVE: https://access.redhat.com/security/cve/CVE-2022-3623
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-3623-hugetlb-fix-races-when-looking-up-CONT-PTE-PMD-size-hugetlb-page-pre-425.patch
From: 4.18.0-477.10.1.el8_8

CVE-2023-0461, CVSSv2 Score: 7.8
Description:
net/ulp: prevent ULP without clone op from entering the LISTEN status
CVE: https://access.redhat.com/security/cve/CVE-2023-0461
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2023-0461-net-ulp-prevent-ULP-without-clone-op-from-entering-the-LISTEN-status.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-42720, CVSSv2 Score: 7.8
Description:
wifi: cfg80211: fix BSS refcounting bugs
CVE: https://access.redhat.com/security/cve/CVE-2022-42720
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-42720-wifi-cfg80211-fix-BSS-refcounting-bugs-pre-425.patch
From: 4.18.0-477.10.1.el8_8

CVE-2023-1195, CVSSv2 Score: 6.5
Description:
cifs: fix use-after-free caused by invalid pointer `hostname`
CVE: https://access.redhat.com/security/cve/CVE-2023-1195
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2023-1195-cifs-fix-use-after-free-caused-by-invalid-pointer-hostname.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-3524, CVSSv2 Score: 6.6
Description:
tcp/udp: Fix memory leak in ipv6_renew_options()
CVE: https://access.redhat.com/security/cve/CVE-2022-3524
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-3524-tcp-udp-Fix-memory-leak-in-ipv6_renew_options.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-3707, CVSSv2 Score: 5.5
Description:
drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
CVE: https://access.redhat.com/security/cve/CVE-2022-3707
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-3707-drm-i915-gvt-fix-double-free-bug-in-split_2MB_gtt_entry.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-3628, CVSSv2 Score: 6.6
Description:
wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
CVE: https://access.redhat.com/security/cve/CVE-2022-3628
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-3628-wifi-brcmfmac-Fix-potential-buffer-overflow-in-brcmf_fweh_event_worker.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-43750, CVSSv2 Score: 6.7
Description:
usb: mon: make mmapped memory read only
CVE: https://access.redhat.com/security/cve/CVE-2022-43750
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-43750-usb-mon-make-mmapped-memory-read-only.patch
From: 4.18.0-477.10.1.el8_8

CVE-2021-33655, CVSSv2 Score: 6.7
Description:
video: of_display_timing.h: include errno.h
CVE: https://access.redhat.com/security/cve/CVE-2021-33655
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2021-33655-0001-video-of_display_timing.h-include-errno.h.patch
From: 4.18.0-477.10.1.el8_8

CVE-2021-33655, CVSSv2 Score: 6.7
Description:
fbcon: Disallow setting font bigger than screen size
CVE: https://access.redhat.com/security/cve/CVE-2021-33655
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2021-33655-0002-fbcon-Disallow-setting-font-bigger-than-screen-size.patch
From: 4.18.0-477.10.1.el8_8

CVE-2021-33655, CVSSv2 Score: 6.7
Description:
fbcon: Prevent that screen size is smaller than font size
CVE: https://access.redhat.com/security/cve/CVE-2021-33655
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2021-33655-0003-fbcon-Prevent-that-screen-size-is-smaller-than-font-.patch
From: 4.18.0-477.10.1.el8_8

CVE-2021-33655, CVSSv2 Score: 6.7
Description:
fbmem: Check virtual screen sizes in fb_set_var()
CVE: https://access.redhat.com/security/cve/CVE-2021-33655
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2021-33655-0004-fbmem-Check-virtual-screen-sizes-in-fb_set_var.patch
From: 4.18.0-477.10.1.el8_8

CVE-2021-33656, CVSSv2 Score: 6.8
Description:
vt: drop old FONT ioctls
CVE: https://access.redhat.com/security/cve/CVE-2021-33656
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2021-33656-vt-drop-old-FONT-ioctls.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-4129, CVSSv2 Score: 5.5
Description:
net: fix a concurrency bug in l2tp_tunnel_register()
CVE: https://access.redhat.com/security/cve/CVE-2022-4129
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-4129-0001-net-fix-a-concurrency-bug-in-l2tp_tunnel_register.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-4129, CVSSv2 Score: 5.5
Description:
l2tp: Serialize access to sk_user_data with sk_callback_lock
CVE: https://access.redhat.com/security/cve/CVE-2022-4129
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-4129-0002-l2tp-Serialize-access-to-sk_user_data-with-sk_callba.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-4129, CVSSv2 Score: 5.5
Description:
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
CVE: https://access.redhat.com/security/cve/CVE-2022-4129
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-4129-0003-l2tp-Don-t-sleep-and-disable-BH-under-writer-side-sk.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-1462, CVSSv2 Score: 6.8
Description:
vt: use tty_insert_flip_string in respond_string
CVE: https://access.redhat.com/security/cve/CVE-2022-1462
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-1462-0001-vt-use-tty_insert_flip_string-in-respond_string.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-1462, CVSSv2 Score: 6.8
Description:
vt: keyboard, use tty_insert_flip_string in puts_queue
CVE: https://access.redhat.com/security/cve/CVE-2022-1462
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-1462-0002-vt-keyboard-use-tty_insert_flip_string-in-puts_queue.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-1462, CVSSv2 Score: 6.8
Description:
tty: drivers/tty/, stop using tty_schedule_flip()
CVE: https://access.redhat.com/security/cve/CVE-2022-1462
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-1462-0003-tty-drivers-tty-stop-using-tty_schedule_flip.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-1462, CVSSv2 Score: 6.8
Description:
tty: the rest, stop using tty_schedule_flip()
CVE: https://access.redhat.com/security/cve/CVE-2022-1462
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-1462-0004-tty-the-rest-stop-using-tty_schedule_flip.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-1462, CVSSv2 Score: 6.8
Description:
tty: drop tty_schedule_flip()
CVE: https://access.redhat.com/security/cve/CVE-2022-1462
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-1462-0005-tty-drop-tty_schedule_flip.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-1462, CVSSv2 Score: 6.8
Description:
tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
CVE: https://access.redhat.com/security/cve/CVE-2022-1462
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-1462-0006-tty-extract-tty_flip_buffer_commit-from-tty_flip_buf.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-1462, CVSSv2 Score: 6.8
Description:
tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
CVE: https://access.redhat.com/security/cve/CVE-2022-1462
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-1462-0007-tty-use-new-tty_insert_flip_string_and_push_buffer-i.patch
From: 4.18.0-477.10.1.el8_8

CVE-2022-1462, CVSSv2 Score: 6.8
Description:
tty: drop tty_schedule_flip()
CVE: https://access.redhat.com/security/cve/CVE-2022-1462
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2022-1462-0005-tty-drop-tty_schedule_flip-kpatch.patch
From: 4.18.0-477.10.1.el8_8

CVE-2023-22998, CVSSv2 Score: 5.5
Description:
drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-22998
Patch: rhel8/4.18.0-477.10.1.el8_8/CVE-2023-22998-drm-virtio-Fix-NULL-vs-IS_ERR-checking-in-virtio_gpu_object_shmem_init-pre-425.patch
From: 4.18.0-477.10.1.el8_8

CVE-2023-32233, CVSSv2 Score: 7.8
Description:
netfilter: nf_tables: deactivate anonymous set from preparation phase
CVE: https://access.redhat.com/security/cve/CVE-2023-32233
Patch: rhel8/4.18.0-477.13.1.el8_8/CVE-2023-32233-netfilter-nf_tables-deactivate-anonymous-set-from-preparation-phase.patch
From: 4.18.0-477.13.1.el8_8

CVE-2023-28466, CVSSv2 Score: 7.0
Description:
net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
CVE: https://access.redhat.com/security/cve/CVE-2023-28466
Patch: rhel8/4.18.0-477.15.1.el8_8/CVE-2023-28466-net-tls-fix-possible-race-condition-between-do_tls_getsockopt_conf-and-do_tls_setsockopt_conf.patch
From: 4.18.0-477.15.1.el8_8

CVE-2022-42896, CVSSv2 Score: 8.8
Description:
Bluetooth: L2CAP: Fix accepting connection request
CVE: https://access.redhat.com/security/cve/CVE-2022-42896
Patch: rhel8/4.18.0-477.21.1.el8_8/CVE-2022-42896-Bluetooth-L2CAP-Fix-accepting-connection-request-for.patch
From: 4.18.0-477.21.1.el8_8

CVE-2023-1281, CVSSv2 Score: 7.8
Description:
net/sched: tcindex: update imperfect hash filters
CVE: https://access.redhat.com/security/cve/CVE-2023-1281
Patch: rhel8/4.18.0-477.21.1.el8_8/CVE-2023-1281-net-sched-tcindex-update-imperfect-hash-filters-resp.patch
From: 4.18.0-477.21.1.el8_8

CVE-2023-1829, CVSSv2 Score:
Description:
Complex adaptation is required, mainline retired tcindex.
CVE:
Patch: skipped/CVE-2023-1829.patch
From:

CVE-2023-2124, CVSSv2 Score: 7.8
Description:
xfs: verify buffer contents when we skip log replay
CVE: https://access.redhat.com/security/cve/CVE-2023-2124
Patch: rhel8/4.18.0-477.21.1.el8_8/CVE-2023-2124-xfs-verify-buffer-contents-when-we-skip-log-replay.patch
From: 4.18.0-477.21.1.el8_8

CVE-2023-2194, CVSSv2 Score: 6.7
Description:
i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
CVE: https://access.redhat.com/security/cve/CVE-2023-2194
Patch: rhel8/4.18.0-477.21.1.el8_8/CVE-2023-2194-i2c-xgene-slimpro-Fix-out-of-bounds-bug-in-xgene_sli.patch
From: 4.18.0-477.21.1.el8_8

CVE-2023-2235, CVSSv2 Score: 7.8
Description:
perf: Fix check before add_event_to_groups() in perf_group_detach()
CVE: https://access.redhat.com/security/cve/CVE-2023-2235
Patch: rhel8/4.18.0-477.21.1.el8_8/CVE-2023-2235-perf-Fix-check-before-add_event_to_groups-in-perf_gr.patch
From: 4.18.0-477.21.1.el8_8

CVE-2023-4004, CVSSv2 Score: 7.8
Description:
netfilter: nft_set_pipapo: fix improper element removal
CVE: https://access.redhat.com/security/cve/CVE-2023-4004
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-4004-netfilter-nft-set-pipapo-fix-improper-element-removal.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-3390, CVSSv2 Score: 7.8
Description:
netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
CVE: https://access.redhat.com/security/cve/CVE-2023-3390
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-3390-netfilter-nf-tables-incorrect-error-path-handling-with.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-3090, CVSSv2 Score: 7.8
Description:
ipvlan:Fix out-of-bounds caused by unclear skb->cb
CVE: https://access.redhat.com/security/cve/CVE-2023-3090
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-3090-ipvlan-fix-out-of-bounds-caused-by-unclear-skb-cb.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-35788, CVSSv2 Score: 7.8
Description:
net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
CVE: https://access.redhat.com/security/cve/CVE-2023-35788
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-35788-net-sched-flower-fix-possible-oob-write-in-fl-set-geneve-opt.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-20593, CVSSv2 Score: 6.5
Description:
hw: amd: Cross-Process Information Leak
CVE: https://access.redhat.com/security/cve/cve-2023-20593
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-20593-zenbleed.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-3776, CVSSv2 Score: 7.8
Description:
net/sched: cls_fw: Fix improper refcount update leads to use-after-free
CVE: https://access.redhat.com/security/cve/CVE-2023-3776
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-3776-net-sched-cls-fw-fix-improper-refcount-update-leads-to.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-35001, CVSSv2 Score: 7.8
Description:
netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
CVE: https://access.redhat.com/security/cve/CVE-2023-35001
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-35001-netfilter-nf_tables-prevent-OOB-access-in-nft_byteorder_eval.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-2002, CVSSv2 Score: 6.8
Description:
bluetooth: Perform careful capability checks in hci_sock_ioctl()
CVE: https://access.redhat.com/security/cve/CVE-2023-2002
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-2002-bluetooth-perform-careful-capability-checks-in-hci_sock_ioctl.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-1118, CVSSv2 Score: 7.8
Description:
media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
CVE: https://access.redhat.com/security/cve/CVE-2023-1118
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1118-media-rc-fix-use-after-free-bugs-caused-by-ene-tx-irqsim.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1989, CVSSv2 Score: 7.0
Description:
Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-1989
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1989-Bluetooth-btsdio-fix-use-after-free-bug-in-btsdio_remove.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-3141, CVSSv2 Score: 7.1
Description:
memstick: r592: Fix UAF bug in r592_remove due to race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-3141
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3141-memstick-r592-Fix-UAF-bug-in-r592_remove-due-to-race.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-3268, CVSSv2 Score: 7.1
Description:
kernel/relay.c: fix read_pos error when multiple readers
CVE: https://access.redhat.com/security/cve/CVE-2023-3268
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3268-kernel-relay.c-fix-read_pos-error-when-multiple-readers.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-3609, CVSSv2 Score: 7.8
Description:
net/sched: cls_u32: Fix reference counter leak leading to overflow
CVE: https://access.redhat.com/security/cve/CVE-2023-3609
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3609-net-sched-cls-u32-fix-reference-counter-leak-leading-to-overflow-pre425.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-3611, CVSSv2 Score: 7.8
Description:
net/sched: sch_qfq: account for stab overhead in qfq_enqueue
CVE: https://access.redhat.com/security/cve/CVE-2023-3611
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3611-net-sched-sch-qfq-account-for-stab-overhead-in-qfq-enqueue.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-4128 CVE-2023-4206, CVSSv2 Score: 7.8
Description:
net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
CVE: https://access.redhat.com/security/cve/CVE-2023-4128
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4128-net-sched-cls_route-No-longer-copy-tcf_result-on-update.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-4128 CVE-2023-4207, CVSSv2 Score: 7.8
Description:
net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
CVE: https://access.redhat.com/security/cve/CVE-2023-4128
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4128-net-sched-cls_fw-No-longer-copy-tcf_result-on-update.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-4128 CVE-2023-4208, CVSSv2 Score: 7.8
Description:
net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
CVE: https://access.redhat.com/security/cve/CVE-2023-4128
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4128-net-sched-cls_u32-No-longer-copy-tcf_result-on-update.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-31436, CVSSv2 Score: 7.0
Description:
net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
CVE: https://access.redhat.com/security/cve/CVE-2023-31436
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-31436-net-sched-sch_qfq-prevent-slab-out-of-bounds-in-qfq_activate_agg.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-35823, CVSSv2 Score: 7.0
Description:
media: saa7134: fix use after free bug in saa7134_finidev due to race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-35823
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-35823-media-saa7134-fix-use-after-free-bug-in-saa7134_fini.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-35824, CVSSv2 Score: 7.0
Description:
media: dm1105: Fix use after free bug in dm1105_remove due to race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-35824
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-35824-media-dm1105-Fix-use-after-free-bug-in-dm1105_remove.patch
From: 4.18.0-513.5.1.el8_9

CVE-2021-43975, CVSSv2 Score: 6.7
Description:
atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
CVE: https://access.redhat.com/security/cve/CVE-2021-43975
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2021-43975-atlantic-fix-oob-read-and-write-in-hw-atl-utils-fw-rpc-wait.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-2513, CVSSv2 Score: 6.7
Description:
ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
CVE: https://access.redhat.com/security/cve/CVE-2023-2513
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-2513-ext4-add-EXT4_INODE_HAS_XATTR_SPACE-macro-in-xattr.h.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-2513, CVSSv2 Score: 6.7
Description:
ext4: fix use-after-free in ext4_xattr_set_entry
CVE: https://access.redhat.com/security/cve/CVE-2023-2513
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-2513-ext4-fix-use-after-free-in-ext4-xattr-set-entry.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-28772, CVSSv2 Score: 6.7
Description:
seq_buf: Fix overflow in seq_buf_putmem_hex()
CVE: https://access.redhat.com/security/cve/CVE-2023-28772
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-28772-seq-buf-fix-overflow-in-seq-buf-putmem-hex.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-1073, CVSSv2 Score: 6.6
Description:
HID: betop: check shape of output reports
CVE: https://access.redhat.com/security/cve/CVE-2023-1073
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1073-hid-betop-check-shape-of-output-reports.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2022-40982, CVSSv2 Score:
Description:
Complex adaptation required.
CVE:
Patch: skipped/CVE-2022-40982.patch
From:

CVE-2022-42895, CVSSv2 Score: 6.7
Description:
Bluetooth: L2CAP: Fix attempting to access uninitialized memory
CVE: https://access.redhat.com/security/cve/CVE-2022-42895
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-42895-bluetooth-l2cap-fix-attempting-to-access-uninitialized-memory.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-30456, CVSSv2 Score: 6.0
Description:
KVM: nVMX: add missing consistency checks for CR0 and CR4
CVE: https://access.redhat.com/security/cve/CVE-2023-30456
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-30456-kvm-nvmx-add-missing-consistency-checks-for-cr0-and-cr4.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-33203, CVSSv2 Score: 6.4
Description:
net: qcom/emac: Fix use after free bug in emac_remove due to race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-33203
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-33203-net-qcom-emac-fix-use-after-free-bug-in-emac-remove-due-to-race.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-1206, CVSSv2 Score:
Description:
This is a low priority CVE & the patch impacts many critical components of the networking subsystem & it requires multiple complex adaptations in those components to avoid losing existing connections on patch/unpatch.
CVE:
Patch: skipped/CVE-2023-1206.patch
From:

CVE-2023-1855, CVSSv2 Score: 6.3
Description:
hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-1855
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1855-patch-hwmon-xgene-fix-use-after-free-bug-in-xgene-hwmon-remove.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-3161, CVSSv2 Score: 5.5
Description:
fbcon: Check font dimension limits
CVE: https://access.redhat.com/security/cve/CVE-2023-3161
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3161-fbcon-check-font-dimension-limits.patch
From: 4.18.0-513.5.1.el8_9

CVE-2022-3640, CVSSv2 Score: 5.5
Description:
Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
CVE: https://access.redhat.com/security/cve/CVE-2022-3640
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-3640-Bluetooth-L2CAP-fix-use-after-free-in-l2cap_conn_del.patch
From: 4.18.0-513.5.1.el8_9

CVE-2022-28388, CVSSv2 Score: 5.5
Description:
can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path
CVE: https://access.redhat.com/security/cve/CVE-2022-28388
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-28388-can-usb_8dev-usb_8dev_start_xmit-fix-double-dev_kfree_skb.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1074, CVSSv2 Score: 5.5
Description:
sctp: fail if no bound addresses can be used for a given scope
CVE: https://access.redhat.com/security/cve/CVE-2023-1074
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1074-sctp-fail-if-no-bound-addresses-can-be-used-for-given-scope.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-3772, CVSSv2 Score: 4.4
Description:
xfrm: add NULL check in xfrm_update_ae_params
CVE: https://access.redhat.com/security/cve/cve-2023-3772
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3772-xfrm-add-NULL-check-in-xfrm_update_ae_params.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1252, CVSSv2 Score: 7.0
Description:
ovl: fix use after free in struct ovl_aio_req
CVE: https://access.redhat.com/security/cve/CVE-2023-1252
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1252-ovl-fix-use-after-free-in-struct-ovl_aio_req.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1252, CVSSv2 Score: 7.0
Description:
ovl: fix use after free in struct ovl_aio_req
CVE: https://access.redhat.com/security/cve/CVE-2023-1252
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1252-ovl-fix-use-after-free-in-struct-ovl_aio_req-kpatch.patch
From: 4.18.0-513.5.1.el8_9

CVE-2022-38457 CVE-2022-40133, CVSSv2 Score: 6.3
Description:
drm/vmwgfx: Remove rcu locks from user resources
CVE: https://access.redhat.com/security/cve/CVE-2022-40133
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-38457-CVE-2022-40133-drm-vmwgfx-Remove-rcu-locks-from-user-resources-pre-425.patch
From: 4.18.0-513.5.1.el8_9

CVE-2022-38457 CVE-2022-40133, CVSSv2 Score: 6.3
Description:
drm/vmwgfx: Remove rcu locks from user resources
CVE: https://access.redhat.com/security/cve/CVE-2022-40133
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-38457-CVE-2022-40133-drm-vmwgfx-Remove-rcu-locks-from-user-resources-post-240-fix.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1079, CVSSv2 Score: 6.8
Description:
HID: asus: use spinlock to safely schedule workers
CVE: https://access.redhat.com/security/cve/CVE-2023-1079
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1079-HID-asus-use-spinlock-to-safely-schedule-workers.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1079, CVSSv2 Score: 6.8
Description:
HID: asus: use spinlock to safely schedule workers
CVE: https://access.redhat.com/security/cve/CVE-2023-1079
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1079-HID-asus-use-spinlock-to-safely-schedule-workers-kpatch.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-31084, CVSSv2 Score: 5.5
Description:
media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
CVE: https://access.redhat.com/security/cve/CVE-2022-31084
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-31084-media-dvb-core-Fix-kernel-WARNING-for-blocking-opera.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-0597, CVSSv2 Score:
Description:
Medium severity vulnerability CVE requiring extremely complex adaptation (if at all possible)
CVE:
Patch: skipped/CVE-2023-0597.patch
From:

CVE-2022-4744, CVSSv2 Score:
Description:
Not possible to trigger in rhel8
CVE:
Patch: skipped/CVE-2022-4744.patch
From:

CVE-2023-28328, CVSSv2 Score: 5.5
Description:
media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
CVE: https://access.redhat.com/security/cve/CVE-2023-28328
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-28328-media-dvb-usb-az6027-fix-null-ptr-deref-in-az6027_i2.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2022-3594, CVSSv2 Score: 5.3
Description:
r8152: Rate limit overflow messages
CVE: https://access.redhat.com/security/cve/CVE-2022-3594
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-3594-r8152-rate-limit-overflow-messages.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-0458, CVSSv2 Score: 4.7
Description:
prlimit: do_prlimit needs to have a speculation check
CVE: https://access.redhat.com/security/cve/CVE-2023-0458
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-0458-prlimit-do-prlimit-needs-to-have-a-speculation-check.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2022-45887, CVSSv2 Score: 4.7
Description:
media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
CVE: https://access.redhat.com/security/cve/CVE-2022-3594
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-45887-patch-media-ttusb-dec-fix-memory-leak-in-ttusb-dec-exit-dvb.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-23455, CVSSv2 Score: 5.5
Description:
net: sched: atm: dont intepret cls results when asked to drop
CVE: https://access.redhat.com/security/cve/CVE-2023-23455
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-23455-net-sched-atm-dont-intepret-cls-results-when-asked-to-drop.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-26545, CVSSv2 Score: 4.7
Description:
net: mpls: fix stale pointer if allocation fails during device rename
CVE: https://access.redhat.com/security/cve/CVE-2023-26545
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-26545-net-mpls-fix-stale-pointer-if-allocation-fails-during-device-rename.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-4155, CVSSv2 Score: 5.5
Description:
net: sched: atm: dont intepret cls results when asked to drop
CVE: https://access.redhat.com/security/cve/CVE-2023-23455
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4155-kvm-sev-only-access-ghcb-fields-once-pre-425.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-4132, CVSSv2 Score: 5.5
Description:
media: usb: siano: Fix use after free bugs caused by do_submit_urb
CVE: https://access.redhat.com/security/cve/CVE-2023-4132
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4132-media-usb-siano-fix-use-after-free-bugs-caused-by-do-submit-urb.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-4132, CVSSv2 Score: 5.5
Description:
media: usb: siano: Fix use after free bugs caused by do_submit_urb
CVE: https://access.redhat.com/security/cve/CVE-2023-4132
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4132-media-usb-siano-fix-warning-due-to-null-work-func-t-function.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-0590, CVSSv2 Score: 4.7
Description:
net: sched: fix race condition in qdisc_graft()
CVE: https://access.redhat.com/security/cve/CVE-2023-0590
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-0590-net-sched-fix-race-condition-in-qdisc-graft-pre-425.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-3212, CVSSv2 Score: 4.4
Description:
gfs2: Don't deref jdesc in evict
CVE: https://access.redhat.com/security/cve/CVE-2023-3212
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3212-gfs2-don-t-deref-jdesc-in-evict-pre-477.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-1382, CVSSv2 Score: 5.5
Description:
tipc: fix an information leak in tipc_topsrv_kern_subscr
CVE: https://security-tracker.debian.org/tracker/CVE-2023-1382
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1382-tipc-fix-an-information-leak-in-tipc_topsrv_kern_subscr.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1382, CVSSv2 Score: 5.5
Description:
tipc: set con sock in tipc_conn_alloc
CVE: https://security-tracker.debian.org/tracker/CVE-2023-1382
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1382-tipc-set-con-sock-in-tipc_conn_alloc.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1382, CVSSv2 Score: 5.5
Description:
tipc: add an extra conn_get in tipc_conn_alloc
CVE: https://security-tracker.debian.org/tracker/CVE-2023-1382
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1382-tipc-add-an-extra-conn_get-in-tipc_conn_alloc.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1075, CVSSv2 Score: 3.3
Description:
net/tls: tls_is_tx_ready() checked list_entry
CVE: https://ubuntu.com/security/CVE-2023-1075
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1075-net-tls-tls_is_tx_ready-checked-list_entry.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-4732, CVSSv2 Score: 4.7
Description:
mm: thp: fix wrong cache flush in remove_migration_pmd()
CVE: https://access.redhat.com/security/cve/CVE-2023-4732
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4732-1-mm-thp-fix-wrong-cache-flush-in-remove_migration_pmd.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-4732, CVSSv2 Score: 4.7
Description:
mm/thp: simplify copying of huge zero page pmd when fork
CVE: https://access.redhat.com/security/cve/CVE-2023-4732
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4732-2-mm-thp-simplify-copying-of-huge-zero-page-pmd-when-f.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-4732, CVSSv2 Score: 4.7
Description:
mm/userfaultfd: fix uffd-wp special cases for
CVE: https://access.redhat.com/security/cve/CVE-2023-4732
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4732-mm-userfaultfd-fix-uffd-wp-special-cases-for-fork-pre-477.21.1.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-2163, CVSSv2 Score: 8.2
Description:
bpf: Fix incorrect verifier pruning due to missing register precision taints
CVE: https://access.redhat.com/security/cve/CVE-2023-2163
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2023-2163-bpf-fix-incorrect-verifier-pruning-due-to-missing-register-precision.patch
From: 4.18.0-513.9.1.el8_9

CVE-2023-3812, CVSSv2 Score: 7.8
Description:
net: tun: fix bugs for oversize packet when napi frags enabled
CVE: https://access.redhat.com/security/cve/CVE-2023-3812
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2023-3812-net-tun-fix-bugs-for-oversize-packet-when-napi-frags-enabled.patch
From: 4.18.0-513.9.1.el8_9

CVE-2023-1192, CVSSv2 Score: 6.5
Description:
cifs: Fix UAF in cifs_demultiplex_thread()
CVE: https://access.redhat.com/security/cve/CVE-2023-1192
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2023-1192-cifs-Fix-UAF-in-cifs_demultiplex_thread.patch
From: 4.18.0-513.9.1.el8_9

CVE-2023-5178, CVSSv2 Score: 8.8
Description:
nvmet-tcp: Fix a possible UAF in queue intialization setup
CVE: https://access.redhat.com/security/cve/CVE-2023-5178
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2023-5178-nvmet-tcp-fix-a-possible-uaf-in-queue-intialization-setup.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvbdev: remove double-unlock
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7808-media-dvbdev-remove-double-unlock.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvbdev: Fix memleak in dvb_register_device
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7810-media-dvbdev-Fix-memleak-in-dvb_register_device.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvbdev: fix error logic at dvb_register_device()
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7811-media-dvbdev-fix-error-logic-at-dvb_register_device.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvbdev: adopts refcnt to avoid UAF
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7812-media-dvbdev-adopts-refcnt-to-avoid-UAF.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvbdev: fix refcnt bug
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7813-media-dvbdev-fix-refcnt-bug.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvbdev: adopts refcnt to avoid UAF (adaptation)
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7812-kpatch.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvb-core: Fix use-after-free due to race at dvb_register_device()
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7814-media-dvb-core-Fix-use-after-free-due-to-race-at-dvb_register_device.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvb-core: Fix use-after-free due to race at dvb_register_device() (adaptation)
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7814-kpatch.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45886, CVSSv2 Score: 7.0
Description:
media: dvb_net: avoid speculation from net slot
CVE: https://access.redhat.com/security/cve/CVE-2022-45886
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45886-7817-media-dvb_net-avoid-speculation-from-net-slot.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45886, CVSSv2 Score: 7.0
Description:
media: dvb-core: Fix use-after-free due on race condition at dvb_net
CVE: https://access.redhat.com/security/cve/CVE-2022-45886
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45886-7818-media-dvb-core-Fix-UAF-due-to-race-condition-at-dvb_net.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45886, CVSSv2 Score: 7.0
Description:
media: dvb-core: Fix use-after-free due on race condition at dvb_net (adaptation)
CVE: https://access.redhat.com/security/cve/CVE-2022-45886
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45886-7818-kpatch.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45919, CVSSv2 Score: 7.0
Description:
media: dvb_ca_en50221: off by one in dvb_ca_en50221_io_do_ioctl()
CVE: https://access.redhat.com/security/cve/CVE-2022-45919
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45919-7819-media-dvb_ca_en50221-off-by-one-in-dvb_ca_en50221_io_do_ioctl.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45919, CVSSv2 Score: 7.0
Description:
media: dvb_ca_en50221: avoid speculation from CA slot
CVE: https://access.redhat.com/security/cve/CVE-2022-45919
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45919-7821-media-dvb_ca_en50221-avoid-speculation-from-CA-slot.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45919, CVSSv2 Score: 7.0
Description:
media: dvb_ca_en50221: fix a size write bug
CVE: https://access.redhat.com/security/cve/CVE-2022-45919
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45919-7822-media-dvb_ca_en50221-fix-a-size-write-bug.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45919, CVSSv2 Score: 7.0
Description:
media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
CVE: https://access.redhat.com/security/cve/CVE-2022-45919
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45919-7823-media-dvb-core-Fix-use-after-free-due-to-race-condition-at-dvb_ca_en50221.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45919, CVSSv2 Score: 7.0
Description:
media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (adaptation)
CVE: https://access.redhat.com/security/cve/CVE-2022-45919
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45919-7823-kpatch.patch
From: 4.18.0-513.9.1.el8_9

CVE-2023-2162, CVSSv2 Score: 6.6
Description:
scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
CVE: https://access.redhat.com/security/cve/CVE-2023-2162
Patch: rhel8/4.18.0-513.11.1.el8_9/CVE-2023-2162-scsi-iscsi_tcp-Fix-UAF-during-login-when-accessing-t.patch
From: 4.18.0-513.11.1.el8_9

CVE-2023-42753, CVSSv2 Score: 7.0
Description:
netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
CVE: https://access.redhat.com/security/cve/CVE-2023-42753
Patch: rhel8/4.18.0-513.11.1.el8_9/CVE-2023-42753-netfilter-ipset-add-the-missing-IP_SET_HASH_WITH_NET0-macro-for-ip_set_hash_netportnet-c.patch
From: 4.18.0-513.11.1.el8_9

CVE-2023-4622, CVSSv2 Score: 6.6
Description:
af_unix: Fix null-ptr-deref in unix_stream_sendpage().
CVE: https://access.redhat.com/security/cve/CVE-2023-4622
Patch: rhel8/4.18.0-513.11.1.el8_9/CVE-2023-4622-af_unix-Fix-null-ptr-deref-in-unix_stream_sendpage.patch
From: 4.18.0-513.11.1.el8_9

CVE-2023-20569, CVSSv2 Score:
Description:
A low priority AMD Inception vulnerability that affects Zen3/Zen4 & relates to RetBleed fixes requiring microcode updates, we can't do much about it in KCare Infra.
CVE:
Patch: skipped/CVE-2023-20569.patch
From:

CVE-2022-36402, CVSSv2 Score: 5.5
Description:
drm/vmwgfx: Fix shader stage validation
CVE: https://access.redhat.com/security/cve/CVE-2022-36402
Patch: rhel8/4.18.0-513.11.1.el8_9/CVE-2022-36402-drm-vmwgfx-Fix-shader-stage-validation-1.patch
From: 4.18.0-513.11.1.el8_9

CVE-2023-4623, CVSSv2 Score: 7.8
Description:
net/sched: sch_hfsc: Ensure inner classes have fsc curve
CVE: https://access.redhat.com/security/cve/CVE-2023-4623
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-4623-net-sched-sch-hfsc-Ensure-inner-classes-have-fsc-curve.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-4623, CVSSv2 Score: 7.8
Description:
net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
CVE: https://access.redhat.com/security/cve/CVE-2023-4623
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-4623-net-sched-sch_hfsc-upgrade-rt-to-sc-when-it-becomes-.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-45871, CVSSv2 Score: 9.8
Description:
igb: set max size RX buffer when store bad packet is enabled
CVE: https://access.redhat.com/security/cve/CVE-2023-45871
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-45871-igb-set-max-size-rx-buffer-when-store-bad-packet-is-enabled.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-45871, CVSSv2 Score: 9.8
Description:
igb: set max size RX buffer when store bad packet is enabled
CVE: https://access.redhat.com/security/cve/CVE-2023-45871
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-45871-igb-set-max-size-rx-buffer-when-store-bad-packet-is-enabled-kpatch.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-4921, CVSSv2 Score: 7.8
Description:
net: sched: sch_qfq: Fix UAF in qfq_dequeue()
CVE: https://access.redhat.com/security/cve/CVE-2023-4921
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-4921-net-sched-sch-qfq-Fix-UAF-in-qfq-dequeue.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-4921, CVSSv2 Score: 7.8
Description:
net: sched: sch_qfq: Fix UAF in qfq_dequeue() (adaptation)
CVE: https://access.redhat.com/security/cve/CVE-2023-4921
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-4921-net-sched-sch-qfq-Fix-UAF-in-qfq_dequeue-kpatch.patch
From: 4.18.0-513.18.1.el8_9

CVE-2022-3545, CVSSv2 Score: 7.8
Description:
nfp: fix use-after-free in area_cache_get()
CVE: https://access.redhat.com/security/cve/CVE-2022-3545
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2022-3545-nfp-fix-use-after-free-in-area-cache-get.patch
From: 4.18.0-513.18.1.el8_9

CVE-2022-41858, CVSSv2 Score: 7.1
Description:
drivers: net: slip: fix NPD bug in sl_tx_timeout()
CVE: https://access.redhat.com/security/cve/CVE-2022-41858
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2022-41858-7989-drivers-net-slip-fix-NPD-bug-in-sl_tx_timeout.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-1838, CVSSv2 Score: 7.1
Description:
Fix double fget() in vhost_net_set_backend()
CVE: https://access.redhat.com/security/cve/CVE-2023-1838
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-1838-7974-Fix-double-fget-in-vhost_net_set_backend.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-1073, CVSSv2 Score: 6.6
Description:
HID: check empty report_list in hid_validate_values()
CVE: https://access.redhat.com/security/cve/CVE-2023-1073
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-1073-8006-HID-check-empty-report_list-in-hid_validate_values.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6606, CVSSv2 Score: 7.1
Description:
smb: client: fix OOB in smbCalcSize()
CVE: https://access.redhat.com/security/cve/CVE-2023-6606
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6606-8022-smb-client-fix-OOB-in-smbCalcSize.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6610, CVSSv2 Score: 7.1
Description:
smb: client: fix potential OOB in cifs_dump_detail()
CVE: https://access.redhat.com/security/cve/CVE-2023-6610
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6610-8023-smb-client-fix-potential-OOB-in-cifs_dump_detail.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6610, CVSSv2 Score: 7.1
Description:
smb: client: fix potential OOB in smb2_dump_detail()
CVE: https://access.redhat.com/security/cve/CVE-2023-6610
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6610-8024-smb-client-fix-potential-OOB-in-smb2_dump_detail.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-46813, CVSSv2 Score: 7.0
Description:
x86/sev-es: Fix SEV-ES OUT/IN immediate opcode vc handling
CVE: https://access.redhat.com/security/cve/CVE-2023-46813
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-46813-7993-x86-sev-es-Fix-SEV-ES-OUT-IN-immediate-opcode-vc-han.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-46813, CVSSv2 Score: 7.0
Description:
x86/sev: Disable MMIO emulation from user mode
CVE: https://access.redhat.com/security/cve/CVE-2023-46813
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-46813-7994-x86-sev-Disable-MMIO-emulation-from-user-mode-pre477.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-46813, CVSSv2 Score: 7.0
Description:
x86/sev: Check IOBM for IOIO exceptions from user-space
CVE: https://access.redhat.com/security/cve/CVE-2023-46813
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-46813-7995-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-46813, CVSSv2 Score: 7.0
Description:
x86/sev: Check for user-space IOIO pointing to kernel space
CVE: https://access.redhat.com/security/cve/CVE-2023-46813
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-46813-7996-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel-pre477.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6535, CVSSv2 Score: 7.5
Description:
Fix a kernel panic when host sends an invalid H2C PDU length
CVE: https://access.redhat.com/security/cve/CVE-2023-6535
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6535-8030-nvmet-tcp-Fix-a-kernel-panic-when-host-sends-an-inva-pre513.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6536, CVSSv2 Score: 7.5
Description:
nvmet-tcp: fix a crash in nvmet_req_complete()
CVE: https://access.redhat.com/security/cve/CVE-2023-6536
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6536-8031-nvmet-tcp-fix-a-crash-in-nvmet_req_complete.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6356, CVSSv2 Score: 7.5
Description:
nvmet-tcp: remove boilerplate code
CVE: https://access.redhat.com/security/cve/CVE-2023-6356
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6356-CVE-2023-6535-CVE-2023-6536-8032-nvmet-tcp-remove-boilerplate-code-pre513.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6535, CVSSv2 Score: 7.5
Description:
nvmet-tcp: Fix the H2C expected PDU len calculation
CVE: https://access.redhat.com/security/cve/CVE-2023-6535
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6535-8033-nvmet-tcp-Fix-the-H2C-expected-PDU-len-calculation-pre513.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-5717, CVSSv2 Score: 7.8
Description:
perf: Disallow mis-matched inherited group reads
CVE: https://access.redhat.com/security/cve/CVE-2023-5717
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-5717-7991-perf-Disallow-mis-matched-inherited-group-reads.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-5717, CVSSv2 Score: 7.8
Description:
perf: Disallow mis-matched inherited group reads (adaptation)
CVE: https://access.redhat.com/security/cve/CVE-2023-5717
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-5717-perf-disallow-mis-matched-inherited-group-reads-kpatch.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-5717, CVSSv2 Score: 7.8
Description:
perf/core: Fix potential NULL deref
CVE: https://access.redhat.com/security/cve/CVE-2023-5717
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-5717-7992-perf-core-Fix-potential-NULL-deref.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6817, CVSSv2 Score: 7.8
Description:
netfilter: nft_set_pipapo: skip inactive elements during set walk
CVE: https://access.redhat.com/security/cve/CVE-2023-6817
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6817-8019-netfilter-nft_set_pipapo-skip-inactive-elements-duri.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-40283, CVSSv2 Score: 7.8
Description:
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
CVE: https://access.redhat.com/security/cve/CVE-2023-40283
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-40283-7990-Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
From: 4.18.0-513.18.1.el8_9

CVE-2024-0646, CVSSv2 Score: 7.8
Description:
net: tls, update curr on splice as well
CVE: https://access.redhat.com/security/cve/CVE-2024-0646
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2024-0646-8028-net-tls-update-curr-on-splice-as-well.patch
From: 4.18.0-513.18.1.el8_9

CVE-2024-0565, CVSSv2 Score: 7.4
Description:
smb: client: fix OOB in receive_encrypted_standard()
CVE: https://access.redhat.com/security/cve/CVE-2024-0565
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2024-0565-smb-client-fix-oob-in-receive-encrypted-standard.patch
From: 4.18.0-513.24.1.el8_9

CVE-2023-6931, CVSSv2 Score: 7.0
Description:
perf: Fix perf_event_validate_size()
CVE: https://access.redhat.com/security/cve/CVE-2023-6931
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2023-6931-perf-Fix-perf_event_validate_size.patch
From: 4.18.0-513.24.1.el8_9

CVE-2023-6931, CVSSv2 Score: 7.0
Description:
perf: Fix perf_event_validate_size() lockdep splat
CVE: https://access.redhat.com/security/cve/CVE-2023-6931
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2023-6931-perf-Fix-perf_event_validate_size-lockdep-splat.patch
From: 4.18.0-513.24.1.el8_9

CVE-2023-51042, CVSSv2 Score: 7.8
Description:
drm/amdgpu: Fix potential fence use-after-free v2
CVE: https://access.redhat.com/security/cve/CVE-2023-51042
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2023-51042-drm-amdgpu-Fix-potential-fence-use-after-free-v2.patch
From: 4.18.0-513.24.1.el8_9

CVE-2021-33631, CVSSv2 Score: 7.3
Description:
ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
CVE: https://access.redhat.com/security/cve/CVE-2021-33631
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2021-33631-ext4-fix-kernel-BUG-in-ext4_write_inline_data_end.patch
From: 4.18.0-513.24.1.el8_9

CVE-2023-6546, CVSSv2 Score: 7.0
Description:
tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
CVE: https://access.redhat.com/security/cve/CVE-2023-6546
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2023-6546-tty-n_gsm-fix-the-UAF-caused-by-race-condition-in-gsm_cleanup_mux.patch
From: 4.18.0-513.24.1.el8_9

CVE-2024-1086, CVSSv2 Score: 7.8
Description:
netfilter: nf_tables: reject QUEUE/DROP verdict parameters
CVE: https://access.redhat.com/security/cve/CVE-2024-1086
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2024-1086-netfilter-nf_tables-reject-QUEUE-DROP-verdict-parameters.patch
From: 4.18.0-513.24.1.el8_9

CVE-2022-38096, CVSSv2 Score: 5.5
Description:
drm/vmwgfx: Fix possible null pointer derefence with invalid contexts
CVE: https://access.redhat.com/security/cve/CVE-2022-38096
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2022-38096-drm-vmwgfx-Fix-possible-null-pointer-derefence-with-invalid-contexts.patch
From: 4.18.0-513.24.1.el8_9

n/a, CVSSv2 Score: n/a
Description:
x86/xen: Add xenpv_restore_regs_and_return_to_usermode()
CVE: n/a
Patch: 4.18.0/x86-xen-Add-xenpv_restore_regs_and_return_to_usermode-el8.patch
From: v5.16

N/A, CVSSv2 Score: N/A
Description:
kpatch add alt asm definitions
CVE: N/A
Patch: 4.15.0/kpatch-add-alt-asm-definitions-56.62.patch
From: N/A

N/A, CVSSv2 Score: N/A
Description:
kpatch add paravirt asm definitions
CVE: N/A
Patch: 4.18.0/0003-kpatch-add-paravirt-asm-definitions.patch
From: N/A

CVE-2022-23816, CVSSv2 Score:
Description:
Livepatching Retbleed may decrease kernel stability and performance. This vulnerability has medium security impact and applies to certain hardware environments only.
CVE:
Patch: skipped/CVE-2022-23816.patch
From:

CVE-2022-23825, CVSSv2 Score:
Description:
Livepatching Retbleed may decrease kernel stability and performance. This vulnerability has medium security impact and applies to certain hardware environments only.
CVE:
Patch: skipped/CVE-2022-23825.patch
From:

CVE-2022-26373, CVSSv2 Score:
Description:
Livepatching Retbleed may decrease the stability and performance of the kernel, while vulnerability has a medium security impact and only for a certain hardware environment.
CVE:
Patch: skipped/CVE-2022-26373.patch
From:

CVE-2022-29900, CVSSv2 Score:
Description:
Livepatching Retbleed may decrease kernel stability and performance. This vulnerability has medium security impact and applies to certain hardware environments only.
CVE:
Patch: skipped/CVE-2022-29900.patch
From:

CVE-2022-29901, CVSSv2 Score:
Description:
Livepatching Retbleed may decrease the stability and performance of the kernel, while vulnerability has a medium security impact and only for a certain hardware environment.
CVE:
Patch: skipped/CVE-2022-29901.patch
From: