KernelCare Directory

kernel-4.18.0-477.13.1.el8_8 (rockylinux8)
Kernel Update Version: 4.18.0-553.8.1.el8_10
Build Date: 2024-07-15 17:22:16
Release Date: 2024-07-23 15:15:46
Release: K20240715_10

CVE-2023-28466, CVSSv2 Score: 7.0
Description:
net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
CVE: https://access.redhat.com/security/cve/CVE-2023-28466
Patch: rhel8/4.18.0-477.15.1.el8_8/CVE-2023-28466-net-tls-fix-possible-race-condition-between-do_tls_getsockopt_conf-and-do_tls_setsockopt_conf.patch
From: 4.18.0-477.15.1.el8_8

CVE-2022-42896, CVSSv2 Score: 8.8
Description:
Bluetooth: L2CAP: Fix accepting connection request
CVE: https://access.redhat.com/security/cve/CVE-2022-42896
Patch: rhel8/4.18.0-477.21.1.el8_8/CVE-2022-42896-Bluetooth-L2CAP-Fix-accepting-connection-request-for.patch
From: 4.18.0-477.21.1.el8_8

CVE-2023-1281, CVSSv2 Score: 7.8
Description:
net/sched: tcindex: update imperfect hash filters
CVE: https://access.redhat.com/security/cve/CVE-2023-1281
Patch: rhel8/4.18.0-477.21.1.el8_8/CVE-2023-1281-net-sched-tcindex-update-imperfect-hash-filters-resp.patch
From: 4.18.0-477.21.1.el8_8

CVE-2023-1829, CVSSv2 Score:
Description:
Complex adaptation is required, mainline retired tcindex.
CVE:
Patch: skipped/CVE-2023-1829.patch
From:

CVE-2023-2124, CVSSv2 Score: 7.8
Description:
xfs: verify buffer contents when we skip log replay
CVE: https://access.redhat.com/security/cve/CVE-2023-2124
Patch: rhel8/4.18.0-477.21.1.el8_8/CVE-2023-2124-xfs-verify-buffer-contents-when-we-skip-log-replay.patch
From: 4.18.0-477.21.1.el8_8

CVE-2023-2194, CVSSv2 Score: 6.7
Description:
i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
CVE: https://access.redhat.com/security/cve/CVE-2023-2194
Patch: rhel8/4.18.0-477.21.1.el8_8/CVE-2023-2194-i2c-xgene-slimpro-Fix-out-of-bounds-bug-in-xgene_sli.patch
From: 4.18.0-477.21.1.el8_8

CVE-2023-2235, CVSSv2 Score: 7.8
Description:
perf: Fix check before add_event_to_groups() in perf_group_detach()
CVE: https://access.redhat.com/security/cve/CVE-2023-2235
Patch: rhel8/4.18.0-477.21.1.el8_8/CVE-2023-2235-perf-Fix-check-before-add_event_to_groups-in-perf_gr.patch
From: 4.18.0-477.21.1.el8_8

CVE-2023-4004, CVSSv2 Score: 7.8
Description:
netfilter: nft_set_pipapo: fix improper element removal
CVE: https://access.redhat.com/security/cve/CVE-2023-4004
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-4004-netfilter-nft-set-pipapo-fix-improper-element-removal.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-3390, CVSSv2 Score: 7.8
Description:
netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
CVE: https://access.redhat.com/security/cve/CVE-2023-3390
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-3390-netfilter-nf-tables-incorrect-error-path-handling-with.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-3090, CVSSv2 Score: 7.8
Description:
ipvlan:Fix out-of-bounds caused by unclear skb->cb
CVE: https://access.redhat.com/security/cve/CVE-2023-3090
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-3090-ipvlan-fix-out-of-bounds-caused-by-unclear-skb-cb.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-35788, CVSSv2 Score: 7.8
Description:
net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
CVE: https://access.redhat.com/security/cve/CVE-2023-35788
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-35788-net-sched-flower-fix-possible-oob-write-in-fl-set-geneve-opt.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-20593, CVSSv2 Score: 6.5
Description:
hw: amd: Cross-Process Information Leak
CVE: https://access.redhat.com/security/cve/cve-2023-20593
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-20593-zenbleed.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-3776, CVSSv2 Score: 7.8
Description:
net/sched: cls_fw: Fix improper refcount update leads to use-after-free
CVE: https://access.redhat.com/security/cve/CVE-2023-3776
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-3776-net-sched-cls-fw-fix-improper-refcount-update-leads-to.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-35001, CVSSv2 Score: 7.8
Description:
netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
CVE: https://access.redhat.com/security/cve/CVE-2023-35001
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-35001-netfilter-nf_tables-prevent-OOB-access-in-nft_byteorder_eval.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-2002, CVSSv2 Score: 6.8
Description:
bluetooth: Perform careful capability checks in hci_sock_ioctl()
CVE: https://access.redhat.com/security/cve/CVE-2023-2002
Patch: rhel8/4.18.0-477.27.1.el8_8/CVE-2023-2002-bluetooth-perform-careful-capability-checks-in-hci_sock_ioctl.patch
From: 4.18.0-477.27.1.el8_8

CVE-2023-1118, CVSSv2 Score: 7.8
Description:
media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
CVE: https://access.redhat.com/security/cve/CVE-2023-1118
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1118-media-rc-fix-use-after-free-bugs-caused-by-ene-tx-irqsim.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1989, CVSSv2 Score: 7.0
Description:
Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-1989
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1989-Bluetooth-btsdio-fix-use-after-free-bug-in-btsdio_remove.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-3141, CVSSv2 Score: 7.1
Description:
memstick: r592: Fix UAF bug in r592_remove due to race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-3141
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3141-memstick-r592-Fix-UAF-bug-in-r592_remove-due-to-race.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-3268, CVSSv2 Score: 7.1
Description:
kernel/relay.c: fix read_pos error when multiple readers
CVE: https://access.redhat.com/security/cve/CVE-2023-3268
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3268-kernel-relay.c-fix-read_pos-error-when-multiple-readers.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-3609, CVSSv2 Score: 7.8
Description:
net/sched: cls_u32: Fix reference counter leak leading to overflow
CVE: https://access.redhat.com/security/cve/CVE-2023-3609
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3609-net-sched-cls-u32-fix-reference-counter-leak-leading-to-overflow.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-3611, CVSSv2 Score: 7.8
Description:
net/sched: sch_qfq: account for stab overhead in qfq_enqueue
CVE: https://access.redhat.com/security/cve/CVE-2023-3611
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3611-net-sched-sch-qfq-account-for-stab-overhead-in-qfq-enqueue.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-4128 CVE-2023-4206, CVSSv2 Score: 7.8
Description:
net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
CVE: https://access.redhat.com/security/cve/CVE-2023-4128
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4128-net-sched-cls_route-No-longer-copy-tcf_result-on-update.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-4128 CVE-2023-4207, CVSSv2 Score: 7.8
Description:
net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
CVE: https://access.redhat.com/security/cve/CVE-2023-4128
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4128-net-sched-cls_fw-No-longer-copy-tcf_result-on-update.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-4128 CVE-2023-4208, CVSSv2 Score: 7.8
Description:
net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
CVE: https://access.redhat.com/security/cve/CVE-2023-4128
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4128-net-sched-cls_u32-No-longer-copy-tcf_result-on-update.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-31436, CVSSv2 Score: 7.0
Description:
net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
CVE: https://access.redhat.com/security/cve/CVE-2023-31436
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-31436-net-sched-sch_qfq-prevent-slab-out-of-bounds-in-qfq_activate_agg.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-35823, CVSSv2 Score: 7.0
Description:
media: saa7134: fix use after free bug in saa7134_finidev due to race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-35823
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-35823-media-saa7134-fix-use-after-free-bug-in-saa7134_fini.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-35824, CVSSv2 Score: 7.0
Description:
media: dm1105: Fix use after free bug in dm1105_remove due to race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-35824
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-35824-media-dm1105-Fix-use-after-free-bug-in-dm1105_remove.patch
From: 4.18.0-513.5.1.el8_9

CVE-2021-43975, CVSSv2 Score: 6.7
Description:
atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
CVE: https://access.redhat.com/security/cve/CVE-2021-43975
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2021-43975-atlantic-fix-oob-read-and-write-in-hw-atl-utils-fw-rpc-wait.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-2513, CVSSv2 Score: 6.7
Description:
ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
CVE: https://access.redhat.com/security/cve/CVE-2023-2513
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-2513-ext4-add-EXT4_INODE_HAS_XATTR_SPACE-macro-in-xattr.h.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-2513, CVSSv2 Score: 6.7
Description:
ext4: fix use-after-free in ext4_xattr_set_entry
CVE: https://access.redhat.com/security/cve/CVE-2023-2513
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-2513-ext4-fix-use-after-free-in-ext4-xattr-set-entry.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-28772, CVSSv2 Score: 6.7
Description:
seq_buf: Fix overflow in seq_buf_putmem_hex()
CVE: https://access.redhat.com/security/cve/CVE-2023-28772
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-28772-seq-buf-fix-overflow-in-seq-buf-putmem-hex.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-1073, CVSSv2 Score: 6.6
Description:
HID: betop: check shape of output reports
CVE: https://access.redhat.com/security/cve/CVE-2023-1073
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1073-hid-betop-check-shape-of-output-reports.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2022-40982, CVSSv2 Score:
Description:
Complex adaptation required.
CVE:
Patch: skipped/CVE-2022-40982.patch
From:

CVE-2022-42895, CVSSv2 Score: 6.7
Description:
Bluetooth: L2CAP: Fix attempting to access uninitialized memory
CVE: https://access.redhat.com/security/cve/CVE-2022-42895
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-42895-bluetooth-l2cap-fix-attempting-to-access-uninitialized-memory.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-30456, CVSSv2 Score: 6.0
Description:
KVM: nVMX: add missing consistency checks for CR0 and CR4
CVE: https://access.redhat.com/security/cve/CVE-2023-30456
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-30456-kvm-nvmx-add-missing-consistency-checks-for-cr0-and-cr4.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-33203, CVSSv2 Score: 6.4
Description:
net: qcom/emac: Fix use after free bug in emac_remove due to race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-33203
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-33203-net-qcom-emac-fix-use-after-free-bug-in-emac-remove-due-to-race.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-1206, CVSSv2 Score:
Description:
This is a low priority CVE & the patch impacts many critical components of the networking subsystem & it requires multiple complex adaptations in those components to avoid losing existing connections on patch/unpatch.
CVE:
Patch: skipped/CVE-2023-1206.patch
From:

CVE-2023-1855, CVSSv2 Score: 6.3
Description:
hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-1855
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1855-patch-hwmon-xgene-fix-use-after-free-bug-in-xgene-hwmon-remove.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-3161, CVSSv2 Score: 5.5
Description:
fbcon: Check font dimension limits
CVE: https://access.redhat.com/security/cve/CVE-2023-3161
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3161-fbcon-check-font-dimension-limits.patch
From: 4.18.0-513.5.1.el8_9

CVE-2022-3640, CVSSv2 Score: 5.5
Description:
Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
CVE: https://access.redhat.com/security/cve/CVE-2022-3640
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-3640-Bluetooth-L2CAP-fix-use-after-free-in-l2cap_conn_del.patch
From: 4.18.0-513.5.1.el8_9

CVE-2022-28388, CVSSv2 Score: 5.5
Description:
can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path
CVE: https://access.redhat.com/security/cve/CVE-2022-28388
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-28388-can-usb_8dev-usb_8dev_start_xmit-fix-double-dev_kfree_skb.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1074, CVSSv2 Score: 5.5
Description:
sctp: fail if no bound addresses can be used for a given scope
CVE: https://access.redhat.com/security/cve/CVE-2023-1074
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1074-sctp-fail-if-no-bound-addresses-can-be-used-for-given-scope.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-3772, CVSSv2 Score: 4.4
Description:
xfrm: add NULL check in xfrm_update_ae_params
CVE: https://access.redhat.com/security/cve/cve-2023-3772
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3772-xfrm-add-NULL-check-in-xfrm_update_ae_params.patch
From: 4.18.0-513.5.1.el8_9

CVE-2022-45869, CVSSv2 Score: 5.5
Description:
KVM: x86/mmu: Fix race condition in direct_page_fault
CVE: https://access.redhat.com/security/cve/CVE-2022-45869
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-45869-kvm-x86-mmu-fix-race-condition-in-direct-page-fault.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1998, CVSSv2 Score: 5.6
Description:
x86/speculation: Allow enabling STIBP with legacy IBRS
CVE: https://access.redhat.com/security/cve/CVE-2023-1998
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1998-x86-speculation-Allow-enabling-STIBP-with-legacy-IB.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1998, CVSSv2 Score: 5.6
Description:
x86/speculation: Allow enabling STIBP with legacy IBRS
CVE: https://access.redhat.com/security/cve/CVE-2023-1998
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1998-x86-speculation-Allow-enabling-STIBP-with-legacy-IB-kpatch.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1252, CVSSv2 Score: 7.0
Description:
ovl: fix use after free in struct ovl_aio_req
CVE: https://access.redhat.com/security/cve/CVE-2023-1252
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1252-ovl-fix-use-after-free-in-struct-ovl_aio_req.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1252, CVSSv2 Score: 7.0
Description:
ovl: fix use after free in struct ovl_aio_req
CVE: https://access.redhat.com/security/cve/CVE-2023-1252
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1252-ovl-fix-use-after-free-in-struct-ovl_aio_req-kpatch.patch
From: 4.18.0-513.5.1.el8_9

CVE-2022-38457 CVE-2022-40133, CVSSv2 Score: 6.3
Description:
drm/vmwgfx: Remove rcu locks from user resources
CVE: https://access.redhat.com/security/cve/CVE-2022-40133
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-38457-CVE-2022-40133-1-drm-vmwgfx-clean-up-some-error-pointer-checking.patch
From: 4.18.0-513.5.1.el8_9

CVE-2022-38457 CVE-2022-40133, CVSSv2 Score: 6.3
Description:
drm/vmwgfx: Remove rcu locks from user resources
CVE: https://access.redhat.com/security/cve/CVE-2022-40133
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-38457-CVE-2022-40133-drm-vmwgfx-Remove-rcu-locks-from-user-resources.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1079, CVSSv2 Score: 6.8
Description:
HID: asus: use spinlock to safely schedule workers
CVE: https://access.redhat.com/security/cve/CVE-2023-1079
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1079-HID-asus-use-spinlock-to-safely-schedule-workers.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1079, CVSSv2 Score: 6.8
Description:
HID: asus: use spinlock to safely schedule workers
CVE: https://access.redhat.com/security/cve/CVE-2023-1079
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1079-HID-asus-use-spinlock-to-safely-schedule-workers-kpatch.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-31084, CVSSv2 Score: 5.5
Description:
media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
CVE: https://access.redhat.com/security/cve/CVE-2022-31084
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-31084-media-dvb-core-Fix-kernel-WARNING-for-blocking-opera.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-0597, CVSSv2 Score:
Description:
Medium severity vulnerability CVE requiring extremely complex adaptation (if at all possible)
CVE:
Patch: skipped/CVE-2023-0597.patch
From:

CVE-2022-4744, CVSSv2 Score:
Description:
Not possible to trigger in rhel8
CVE:
Patch: skipped/CVE-2022-4744.patch
From:

CVE-2023-28328, CVSSv2 Score: 5.5
Description:
media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
CVE: https://access.redhat.com/security/cve/CVE-2023-28328
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-28328-media-dvb-usb-az6027-fix-null-ptr-deref-in-az6027_i2.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2022-3594, CVSSv2 Score: 5.3
Description:
r8152: Rate limit overflow messages
CVE: https://access.redhat.com/security/cve/CVE-2022-3594
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-3594-r8152-rate-limit-overflow-messages.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-0458, CVSSv2 Score: 4.7
Description:
prlimit: do_prlimit needs to have a speculation check
CVE: https://access.redhat.com/security/cve/CVE-2023-0458
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-0458-prlimit-do-prlimit-needs-to-have-a-speculation-check.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2022-45887, CVSSv2 Score: 4.7
Description:
media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
CVE: https://access.redhat.com/security/cve/CVE-2022-3594
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2022-45887-patch-media-ttusb-dec-fix-memory-leak-in-ttusb-dec-exit-dvb.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-23455, CVSSv2 Score: 5.5
Description:
net: sched: atm: dont intepret cls results when asked to drop
CVE: https://access.redhat.com/security/cve/CVE-2023-23455
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-23455-net-sched-atm-dont-intepret-cls-results-when-asked-to-drop.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-26545, CVSSv2 Score: 4.7
Description:
net: mpls: fix stale pointer if allocation fails during device rename
CVE: https://access.redhat.com/security/cve/CVE-2023-26545
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-26545-net-mpls-fix-stale-pointer-if-allocation-fails-during-device-rename.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-4155, CVSSv2 Score: 5.5
Description:
net: sched: atm: dont intepret cls results when asked to drop
CVE: https://access.redhat.com/security/cve/CVE-2023-23455
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4155-kvm-sev-only-access-ghcb-fields-once.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-4132, CVSSv2 Score: 5.5
Description:
media: usb: siano: Fix use after free bugs caused by do_submit_urb
CVE: https://access.redhat.com/security/cve/CVE-2023-4132
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4132-media-usb-siano-fix-use-after-free-bugs-caused-by-do-submit-urb.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-4132, CVSSv2 Score: 5.5
Description:
media: usb: siano: Fix use after free bugs caused by do_submit_urb
CVE: https://access.redhat.com/security/cve/CVE-2023-4132
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4132-media-usb-siano-fix-warning-due-to-null-work-func-t-function.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-0590, CVSSv2 Score: 4.7
Description:
net: sched: fix race condition in qdisc_graft()
CVE: https://access.redhat.com/security/cve/CVE-2023-0590
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-0590-net-sched-fix-race-condition-in-qdisc-graft.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-3212, CVSSv2 Score: 4.4
Description:
gfs2: Don't deref jdesc in evict
CVE: https://access.redhat.com/security/cve/CVE-2023-3212
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-3212-gfs2-don-t-deref-jdesc-in-evict.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-1382, CVSSv2 Score: 5.5
Description:
tipc: set con sock in tipc_conn_alloc
CVE: https://security-tracker.debian.org/tracker/CVE-2023-1382
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1382-tipc-set-con-sock-in-tipc_conn_alloc.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1382, CVSSv2 Score: 5.5
Description:
tipc: add an extra conn_get in tipc_conn_alloc
CVE: https://security-tracker.debian.org/tracker/CVE-2023-1382
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1382-tipc-add-an-extra-conn_get-in-tipc_conn_alloc.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-1075, CVSSv2 Score: 3.3
Description:
net/tls: tls_is_tx_ready() checked list_entry
CVE: https://ubuntu.com/security/CVE-2023-1075
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-1075-net-tls-tls_is_tx_ready-checked-list_entry.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-33951 CVE-2023-33952, CVSSv2 Score: 6.7
Description:
drm/vmwgfx: Do not drop the reference to the handle too soon
CVE: https://access.redhat.com/security/cve/cve-2023-33951
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-33951-CVE-2023-33952-drm-vmwgfx-Do-not-drop-the-reference-to-the-handle-t.patch
From: kernel-4.18.0-513.5.1.el8_9

CVE-2023-4732, CVSSv2 Score: 4.7
Description:
mm: thp: fix wrong cache flush in remove_migration_pmd()
CVE: https://access.redhat.com/security/cve/CVE-2023-4732
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4732-1-mm-thp-fix-wrong-cache-flush-in-remove_migration_pmd.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-4732, CVSSv2 Score: 4.7
Description:
mm/thp: simplify copying of huge zero page pmd when fork
CVE: https://access.redhat.com/security/cve/CVE-2023-4732
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4732-2-mm-thp-simplify-copying-of-huge-zero-page-pmd-when-f.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-4732, CVSSv2 Score: 4.7
Description:
mm/userfaultfd: fix uffd-wp special cases for
CVE: https://access.redhat.com/security/cve/CVE-2023-4732
Patch: rhel8/4.18.0-513.5.1.el8_9/CVE-2023-4732-mm-userfaultfd-fix-uffd-wp-special-cases-for-fork-pre-477.21.1.patch
From: 4.18.0-513.5.1.el8_9

CVE-2023-2163, CVSSv2 Score: 8.2
Description:
bpf: Fix incorrect verifier pruning due to missing register precision taints
CVE: https://access.redhat.com/security/cve/CVE-2023-2163
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2023-2163-bpf-fix-incorrect-verifier-pruning-due-to-missing-register-precision.patch
From: 4.18.0-513.9.1.el8_9

CVE-2023-3812, CVSSv2 Score: 7.8
Description:
net: tun: fix bugs for oversize packet when napi frags enabled
CVE: https://access.redhat.com/security/cve/CVE-2023-3812
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2023-3812-net-tun-fix-bugs-for-oversize-packet-when-napi-frags-enabled.patch
From: 4.18.0-513.9.1.el8_9

CVE-2023-1192, CVSSv2 Score: 6.5
Description:
cifs: Fix UAF in cifs_demultiplex_thread()
CVE: https://access.redhat.com/security/cve/CVE-2023-1192
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2023-1192-cifs-Fix-UAF-in-cifs_demultiplex_thread.patch
From: 4.18.0-513.9.1.el8_9

CVE-2023-5178, CVSSv2 Score: 8.8
Description:
nvmet-tcp: Fix a possible UAF in queue intialization setup
CVE: https://access.redhat.com/security/cve/CVE-2023-5178
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2023-5178-nvmet-tcp-fix-a-possible-uaf-in-queue-intialization-setup.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvbdev: remove double-unlock
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7808-media-dvbdev-remove-double-unlock.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvbdev: Fix memleak in dvb_register_device
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7810-media-dvbdev-Fix-memleak-in-dvb_register_device.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvbdev: fix error logic at dvb_register_device()
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7811-media-dvbdev-fix-error-logic-at-dvb_register_device.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvbdev: adopts refcnt to avoid UAF
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7812-media-dvbdev-adopts-refcnt-to-avoid-UAF.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvbdev: fix refcnt bug
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7813-media-dvbdev-fix-refcnt-bug.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvbdev: adopts refcnt to avoid UAF (adaptation)
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7812-kpatch.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvb-core: Fix use-after-free due to race at dvb_register_device()
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7814-media-dvb-core-Fix-use-after-free-due-to-race-at-dvb_register_device.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45884, CVSSv2 Score: 7.0
Description:
media: dvb-core: Fix use-after-free due to race at dvb_register_device() (adaptation)
CVE: https://access.redhat.com/security/cve/CVE-2022-45884
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45884-7814-kpatch.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45886, CVSSv2 Score: 7.0
Description:
media: dvb_net: avoid speculation from net slot
CVE: https://access.redhat.com/security/cve/CVE-2022-45886
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45886-7817-media-dvb_net-avoid-speculation-from-net-slot.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45886, CVSSv2 Score: 7.0
Description:
media: dvb-core: Fix use-after-free due on race condition at dvb_net
CVE: https://access.redhat.com/security/cve/CVE-2022-45886
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45886-7818-media-dvb-core-Fix-UAF-due-to-race-condition-at-dvb_net.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45886, CVSSv2 Score: 7.0
Description:
media: dvb-core: Fix use-after-free due on race condition at dvb_net (adaptation)
CVE: https://access.redhat.com/security/cve/CVE-2022-45886
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45886-7818-kpatch.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45919, CVSSv2 Score: 7.0
Description:
media: dvb_ca_en50221: off by one in dvb_ca_en50221_io_do_ioctl()
CVE: https://access.redhat.com/security/cve/CVE-2022-45919
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45919-7819-media-dvb_ca_en50221-off-by-one-in-dvb_ca_en50221_io_do_ioctl.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45919, CVSSv2 Score: 7.0
Description:
media: dvb_ca_en50221: avoid speculation from CA slot
CVE: https://access.redhat.com/security/cve/CVE-2022-45919
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45919-7821-media-dvb_ca_en50221-avoid-speculation-from-CA-slot.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45919, CVSSv2 Score: 7.0
Description:
media: dvb_ca_en50221: fix a size write bug
CVE: https://access.redhat.com/security/cve/CVE-2022-45919
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45919-7822-media-dvb_ca_en50221-fix-a-size-write-bug.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45919, CVSSv2 Score: 7.0
Description:
media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
CVE: https://access.redhat.com/security/cve/CVE-2022-45919
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45919-7823-media-dvb-core-Fix-use-after-free-due-to-race-condition-at-dvb_ca_en50221.patch
From: 4.18.0-513.9.1.el8_9

CVE-2022-45919, CVSSv2 Score: 7.0
Description:
media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (adaptation)
CVE: https://access.redhat.com/security/cve/CVE-2022-45919
Patch: rhel8/4.18.0-513.9.1.el8_9/CVE-2022-45919-7823-kpatch.patch
From: 4.18.0-513.9.1.el8_9

CVE-2023-2162, CVSSv2 Score: 6.6
Description:
scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
CVE: https://access.redhat.com/security/cve/CVE-2023-2162
Patch: rhel8/4.18.0-513.11.1.el8_9/CVE-2023-2162-scsi-iscsi_tcp-Fix-UAF-during-login-when-accessing-t.patch
From: 4.18.0-513.11.1.el8_9

CVE-2023-42753, CVSSv2 Score: 7.0
Description:
netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
CVE: https://access.redhat.com/security/cve/CVE-2023-42753
Patch: rhel8/4.18.0-513.11.1.el8_9/CVE-2023-42753-netfilter-ipset-add-the-missing-IP_SET_HASH_WITH_NET0-macro-for-ip_set_hash_netportnet-c.patch
From: 4.18.0-513.11.1.el8_9

CVE-2023-4622, CVSSv2 Score: 6.6
Description:
af_unix: Fix null-ptr-deref in unix_stream_sendpage().
CVE: https://access.redhat.com/security/cve/CVE-2023-4622
Patch: rhel8/4.18.0-513.11.1.el8_9/CVE-2023-4622-af_unix-Fix-null-ptr-deref-in-unix_stream_sendpage.patch
From: 4.18.0-513.11.1.el8_9

CVE-2023-20569, CVSSv2 Score:
Description:
A low priority AMD Inception vulnerability that affects Zen3/Zen4 & relates to RetBleed fixes requiring microcode updates, we can't do much about it in KCare Infra.
CVE:
Patch: skipped/CVE-2023-20569.patch
From:

CVE-2023-5633, CVSSv2 Score: 7.8
Description:
drm/vmwgfx: Fix possible invalid drm gem put calls
CVE: https://access.redhat.com/security/cve/CVE-2023-5633
Patch: rhel8/4.18.0-513.11.1.el8_9/CVE-2023-5633-drm-vmwgfx-Fix-possible-invalid-drm-gem-put-calls.patch
From: 4.18.0-513.11.1.el8_9

CVE-2023-5633, CVSSv2 Score: 7.8
Description:
drm/vmwgfx: Keep a gem reference to user bos in surfaces
CVE: https://access.redhat.com/security/cve/CVE-2023-5633
Patch: rhel8/4.18.0-513.11.1.el8_9/CVE-2023-5633-drm-vmwgfx-Keep-a-gem-reference-to-user-bos-in-surfa-1.patch
From: 4.18.0-513.11.1.el8_9

CVE-2022-36402, CVSSv2 Score: 5.5
Description:
drm/vmwgfx: Fix shader stage validation
CVE: https://access.redhat.com/security/cve/CVE-2022-36402
Patch: rhel8/4.18.0-513.11.1.el8_9/CVE-2022-36402-drm-vmwgfx-Fix-shader-stage-validation.patch
From: 4.18.0-513.11.1.el8_9

CVE-2023-4623, CVSSv2 Score: 7.8
Description:
net/sched: sch_hfsc: Ensure inner classes have fsc curve
CVE: https://access.redhat.com/security/cve/CVE-2023-4623
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-4623-net-sched-sch-hfsc-Ensure-inner-classes-have-fsc-curve.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-4623, CVSSv2 Score: 7.8
Description:
net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
CVE: https://access.redhat.com/security/cve/CVE-2023-4623
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-4623-net-sched-sch_hfsc-upgrade-rt-to-sc-when-it-becomes-.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-45871, CVSSv2 Score: 9.8
Description:
igb: set max size RX buffer when store bad packet is enabled
CVE: https://access.redhat.com/security/cve/CVE-2023-45871
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-45871-igb-set-max-size-rx-buffer-when-store-bad-packet-is-enabled.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-45871, CVSSv2 Score: 9.8
Description:
igb: set max size RX buffer when store bad packet is enabled
CVE: https://access.redhat.com/security/cve/CVE-2023-45871
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-45871-igb-set-max-size-rx-buffer-when-store-bad-packet-is-enabled-kpatch.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-4921, CVSSv2 Score: 7.8
Description:
net: sched: sch_qfq: Fix UAF in qfq_dequeue()
CVE: https://access.redhat.com/security/cve/CVE-2023-4921
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-4921-net-sched-sch-qfq-Fix-UAF-in-qfq-dequeue.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-4921, CVSSv2 Score: 7.8
Description:
net: sched: sch_qfq: Fix UAF in qfq_dequeue() (adaptation)
CVE: https://access.redhat.com/security/cve/CVE-2023-4921
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-4921-net-sched-sch-qfq-Fix-UAF-in-qfq_dequeue-kpatch.patch
From: 4.18.0-513.18.1.el8_9

CVE-2022-3545, CVSSv2 Score: 7.8
Description:
nfp: fix use-after-free in area_cache_get()
CVE: https://access.redhat.com/security/cve/CVE-2022-3545
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2022-3545-nfp-fix-use-after-free-in-area-cache-get.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-2166, CVSSv2 Score: 5.5
Description:
can: af_can: fix NULL pointer dereference in can_rcv_filter
CVE: https://access.redhat.com/security/cve/CVE-2023-2166
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-2166-7998-can-af_can-fix-NULL-pointer-dereference-in-can_rcv_f.patch
From: 4.18.0-513.18.1.el8_9

CVE-2022-41858, CVSSv2 Score: 7.1
Description:
drivers: net: slip: fix NPD bug in sl_tx_timeout()
CVE: https://access.redhat.com/security/cve/CVE-2022-41858
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2022-41858-7989-drivers-net-slip-fix-NPD-bug-in-sl_tx_timeout.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-1838, CVSSv2 Score: 7.1
Description:
Fix double fget() in vhost_net_set_backend()
CVE: https://access.redhat.com/security/cve/CVE-2023-1838
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-1838-7974-Fix-double-fget-in-vhost_net_set_backend.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-1073, CVSSv2 Score: 6.6
Description:
HID: check empty report_list in hid_validate_values()
CVE: https://access.redhat.com/security/cve/CVE-2023-1073
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-1073-8006-HID-check-empty-report_list-in-hid_validate_values.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6606, CVSSv2 Score: 7.1
Description:
smb: client: fix OOB in smbCalcSize()
CVE: https://access.redhat.com/security/cve/CVE-2023-6606
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6606-8022-smb-client-fix-OOB-in-smbCalcSize.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6610, CVSSv2 Score: 7.1
Description:
smb: client: fix potential OOB in cifs_dump_detail()
CVE: https://access.redhat.com/security/cve/CVE-2023-6610
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6610-8023-smb-client-fix-potential-OOB-in-cifs_dump_detail.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6610, CVSSv2 Score: 7.1
Description:
smb: client: fix potential OOB in smb2_dump_detail()
CVE: https://access.redhat.com/security/cve/CVE-2023-6610
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6610-8024-smb-client-fix-potential-OOB-in-smb2_dump_detail.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-46813, CVSSv2 Score: 7.0
Description:
x86/sev-es: Fix SEV-ES OUT/IN immediate opcode vc handling
CVE: https://access.redhat.com/security/cve/CVE-2023-46813
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-46813-7993-x86-sev-es-Fix-SEV-ES-OUT-IN-immediate-opcode-vc-han.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-46813, CVSSv2 Score: 7.0
Description:
x86/sev: Disable MMIO emulation from user mode
CVE: https://access.redhat.com/security/cve/CVE-2023-46813
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-46813-7994-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-46813, CVSSv2 Score: 7.0
Description:
x86/sev: Check IOBM for IOIO exceptions from user-space
CVE: https://access.redhat.com/security/cve/CVE-2023-46813
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-46813-7995-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-46813, CVSSv2 Score: 7.0
Description:
x86/sev: Check for user-space IOIO pointing to kernel space
CVE: https://access.redhat.com/security/cve/CVE-2023-46813
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-46813-7996-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6535, CVSSv2 Score: 7.5
Description:
Fix a kernel panic when host sends an invalid H2C PDU length
CVE: https://access.redhat.com/security/cve/CVE-2023-6535
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6535-8030-nvmet-tcp-Fix-a-kernel-panic-when-host-sends-an-inva-pre513.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6536, CVSSv2 Score: 7.5
Description:
nvmet-tcp: fix a crash in nvmet_req_complete()
CVE: https://access.redhat.com/security/cve/CVE-2023-6536
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6536-8031-nvmet-tcp-fix-a-crash-in-nvmet_req_complete.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6356, CVSSv2 Score: 7.5
Description:
nvmet-tcp: remove boilerplate code
CVE: https://access.redhat.com/security/cve/CVE-2023-6356
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6356-CVE-2023-6535-CVE-2023-6536-8032-nvmet-tcp-remove-boilerplate-code-pre513.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6535, CVSSv2 Score: 7.5
Description:
nvmet-tcp: Fix the H2C expected PDU len calculation
CVE: https://access.redhat.com/security/cve/CVE-2023-6535
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6535-8033-nvmet-tcp-Fix-the-H2C-expected-PDU-len-calculation-pre513.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-5717, CVSSv2 Score: 7.8
Description:
perf: Disallow mis-matched inherited group reads
CVE: https://access.redhat.com/security/cve/CVE-2023-5717
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-5717-7991-perf-Disallow-mis-matched-inherited-group-reads.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-5717, CVSSv2 Score: 7.8
Description:
perf: Disallow mis-matched inherited group reads (adaptation)
CVE: https://access.redhat.com/security/cve/CVE-2023-5717
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-5717-perf-disallow-mis-matched-inherited-group-reads-kpatch.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-5717, CVSSv2 Score: 7.8
Description:
perf/core: Fix potential NULL deref
CVE: https://access.redhat.com/security/cve/CVE-2023-5717
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-5717-7992-perf-core-Fix-potential-NULL-deref.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-6817, CVSSv2 Score: 7.8
Description:
netfilter: nft_set_pipapo: skip inactive elements during set walk
CVE: https://access.redhat.com/security/cve/CVE-2023-6817
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-6817-8019-netfilter-nft_set_pipapo-skip-inactive-elements-duri.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-40283, CVSSv2 Score: 7.8
Description:
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
CVE: https://access.redhat.com/security/cve/CVE-2023-40283
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-40283-7990-Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
From: 4.18.0-513.18.1.el8_9

CVE-2024-0646, CVSSv2 Score: 7.8
Description:
net: tls, update curr on splice as well
CVE: https://access.redhat.com/security/cve/CVE-2024-0646
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2024-0646-8028-net-tls-update-curr-on-splice-as-well.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-2176, CVSSv2 Score: 7.8
Description:
RDMA/core: Refactor rdma_bind_addr
CVE: https://access.redhat.com/security/cve/CVE-2023-2176
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-2176-RDMA-core-Refactor-rdma-bind-addr.patch
From: 4.18.0-513.18.1.el8_9

CVE-2023-2176, CVSSv2 Score: 7.8
Description:
RDMA/core: Update CMA destination address on rdma_resolve_addr
CVE: https://access.redhat.com/security/cve/CVE-2023-2176
Patch: rhel8/4.18.0-513.18.1.el8_9/CVE-2023-2176-RDMA-core-Update-CMA-destination-address-on-rdma-res.patch
From: 4.18.0-513.18.1.el8_9

CVE-2024-0565, CVSSv2 Score: 7.4
Description:
smb: client: fix OOB in receive_encrypted_standard()
CVE: https://access.redhat.com/security/cve/CVE-2024-0565
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2024-0565-smb-client-fix-oob-in-receive-encrypted-standard.patch
From: 4.18.0-513.24.1.el8_9

CVE-2023-6931, CVSSv2 Score: 7.0
Description:
perf: Fix perf_event_validate_size()
CVE: https://access.redhat.com/security/cve/CVE-2023-6931
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2023-6931-perf-Fix-perf_event_validate_size.patch
From: 4.18.0-513.24.1.el8_9

CVE-2023-6931, CVSSv2 Score: 7.0
Description:
perf: Fix perf_event_validate_size() lockdep splat
CVE: https://access.redhat.com/security/cve/CVE-2023-6931
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2023-6931-perf-Fix-perf_event_validate_size-lockdep-splat.patch
From: 4.18.0-513.24.1.el8_9

CVE-2023-51042, CVSSv2 Score: 7.8
Description:
drm/amdgpu: Fix potential fence use-after-free v2
CVE: https://access.redhat.com/security/cve/CVE-2023-51042
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2023-51042-drm-amdgpu-Fix-potential-fence-use-after-free-v2.patch
From: 4.18.0-513.24.1.el8_9

CVE-2021-33631, CVSSv2 Score: 7.3
Description:
ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
CVE: https://access.redhat.com/security/cve/CVE-2021-33631
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2021-33631-ext4-fix-kernel-BUG-in-ext4_write_inline_data_end.patch
From: 4.18.0-513.24.1.el8_9

CVE-2023-6546, CVSSv2 Score: 7.0
Description:
tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
CVE: https://access.redhat.com/security/cve/CVE-2023-6546
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2023-6546-tty-n_gsm-fix-the-UAF-caused-by-race-condition-in-gsm_cleanup_mux.patch
From: 4.18.0-513.24.1.el8_9

CVE-2024-1086, CVSSv2 Score: 7.8
Description:
netfilter: nf_tables: reject QUEUE/DROP verdict parameters
CVE: https://access.redhat.com/security/cve/CVE-2024-1086
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2024-1086-netfilter-nf_tables-reject-QUEUE-DROP-verdict-parameters.patch
From: 4.18.0-513.24.1.el8_9

CVE-2022-38096, CVSSv2 Score: 5.5
Description:
drm/vmwgfx: Fix possible null pointer derefence with invalid contexts
CVE: https://access.redhat.com/security/cve/CVE-2022-38096
Patch: rhel8/4.18.0-513.24.1.el8_9/CVE-2022-38096-drm-vmwgfx-Fix-possible-null-pointer-derefence-with-invalid-contexts.patch
From: 4.18.0-513.24.1.el8_9

CVE-2023-4244, CVSSv2 Score:
Description:
An introduction of required changes through KernelCare could cause unavoidable problems to applications which use netfilter functionality.
CVE:
Patch: skipped/CVE-2023-4244.patch
From:

CVE-2023-6176, CVSSv2 Score: 7.8
Description:
net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
CVE: https://access.redhat.com/security/cve/CVE-2023-6176
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-6176-net-tls-do-not-free-tls_rec-on-async-operation-in-bpf_exec_tx_verdict.patch
From: 4.18.0-553.el8_10

CVE-2023-6932, CVSSv2 Score: 7.8
Description:
ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
CVE: https://access.redhat.com/security/cve/CVE-2023-6932
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-6932-ipv4-igmp-fix-refcnt-uaf-issue-when-receiving-igmp-query-packet.patch
From: 4.18.0-553.el8_10

CVE-2023-28464, CVSSv2 Score: 7.8
Description:
Bluetooth: Fix double free in hci_conn_cleanup
CVE: https://access.redhat.com/security/cve/CVE-2023-28464
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-28464-bluetooth-fix-double-free-in-hci-conn-cleanup.patch
From: 4.18.0-553.el8_10

CVE-2024-0841, CVSSv2 Score: 6.6
Description:
fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
CVE: https://access.redhat.com/security/cve/CVE-2024-0841
Patch: rhel8/4.18.0-553.el8_10/CVE-2024-0841-fs-hugetlb-fix-null-pointer-dereference-in.patch
From: 4.18.0-553.el8_10

CVE-2023-6915, CVSSv2 Score: 6.2
Description:
ida: Fix crash in ida_free when the bitmap is empty
CVE: https://access.redhat.com/security/cve/CVE-2023-6915
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-6915-ida-fix-crash-in-ida-free-when-the-bitmap-is.patch
From: 4.18.0-553.el8_10

CVE-2023-39198, CVSSv2 Score: 7.5
Description:
drm/qxl: fix UAF on handle creation
CVE: https://access.redhat.com/security/cve/CVE-2023-39198
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-39198-drm-qxl-fix-uaf-on-handle-creation.patch
From: 4.18.0-553.el8_10

CVE-2021-4204, CVSSv2 Score: 6.4
Description:
UBUNTU: SAUCE: bpf: prevent helper argument PTR_TO_ALLOC_MEM to have offset other than 0
CVE: https://people.canonical.com/~ubuntu-security/cve/2021/CVE-2021-4204
Patch: 5.11.0/CVE-2021-4204-UBUNTU-SAUCE-bpf-prevent-helper-argument-PTR_TO_ALLOC_MEM-to-have-offset-other-than-0.patch
From: 5.11.0-46.51~20.04.2

CVE-2024-25742 CVE-2024-25743, CVSSv2 Score: 7.1
Description:
x86/sev: Harden #VC instruction emulation somewhat
CVE: https://access.redhat.com/security/cve/CVE-2024-25743
Patch: rhel8/4.18.0-553.el8_10/CVE-2024-25742-CVE-2024-25743-3942-x86-sev-Harden-VC-instruction-emulation-somewhat.patch
From: 4.18.0-553.el8_10

CVE-2023-51779, CVSSv2 Score: 7.0
Description:
Bluetooth: af_bluetooth: Fix Use-After-Free in
CVE: https://access.redhat.com/security/cve/CVE-2023-51779
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-51779-2946-Bluetooth-af_bluetooth-Fix-Use-After-Free-in-bt_sock.patch
From: 4.18.0-553.el8_10

CVE-2023-24023, CVSSv2 Score: 6.8
Description:
Bluetooth: Add more enc key size check
CVE: https://access.redhat.com/security/cve/CVE-2023-24023
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-24023-3694-Bluetooth-Add-more-enc-key-size-check.patch
From: 4.18.0-553.el8_10

CVE-2019-13631, CVSSv2 Score: 5.3
Description:
Input: gtco - bounds check collection indent level
CVE: https://access.redhat.com/security/cve/CVE-2019-13631
Patch: rhel8/4.18.0-553.el8_10/CVE-2019-13631-0684-Input-gtco-bounds-check-collection-indent-level.patch
From: 4.18.0-553.el8_10

CVE-2023-52581, CVSSv2 Score:
Description:
The patch for this CVE already present in kernel-5.14.0-362.24.1.el9_3 version. The kernel-5.14.0-362.18.1.el9_3 version and below are not vulnerable because they don't have commit 5f68718b34a5 (netfilter: nf_tables: GC transaction API to avoid race with control plane) which introduced the vulnerability.
CVE:
Patch: skipped/CVE-2023-52581.patch
From:

CVE-2023-39189, CVSSv2 Score: 6.0
Description:
netfilter: nfnetlink_osf: avoid OOB read
CVE: https://access.redhat.com/security/cve/CVE-2023-39189
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-39189-netfilter-nfnetlink-osf-avoid-oob-read.patch
From: 4.18.0-553.el8_10

CVE-2023-39193, CVSSv2 Score: 6.1
Description:
netfilter: xt_sctp: validate the flag_info count
CVE: https://access.redhat.com/security/cve/CVE-2023-39193
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-39193-netfilter-xt-sctp-validate-the-flag-info-count.patch
From: 4.18.0-553.el8_10

CVE-2023-4133, CVSSv2 Score:
Description:
Complex adaptation required to add timer_shutdown_sync() in timers subsystem.
CVE:
Patch: skipped/CVE-2023-4133.patch
From:

CVE-2023-38409, CVSSv2 Score: 5.5
Description:
fbcon: Fix error paths in set_con2fb_map
CVE: https://access.redhat.com/security/cve/CVE-2023-38409
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-38409-fbcon-fix-error-paths-in-set-con2fb-map.patch
From: 4.18.0-553.el8_10

CVE-2023-38409, CVSSv2 Score: 5.5
Description:
fbcon: set_con2fb_map needs to set con2fb_map!
CVE: https://access.redhat.com/security/cve/CVE-2023-38409
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-38409-fbcon-set-con2fb-map-needs-to-set-con2fb-map.patch
From: 4.18.0-553.el8_10

CVE-2023-42755, CVSSv2 Score: 6.5
Description:
net/sched: cls_rsvp: always try to match inside the linear part of skb
CVE: https://access.redhat.com/security/cve/CVE-2023-42755
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-42755-net-sched-cls-rsvp-always-try-to-match-inside-the-linear-part-of-skb-477.patch
From: 4.18.0-553.el8_10

CVE-2023-6622, CVSSv2 Score: 5.5
Description:
netfilter: nf_tables: bail out on mismatching
CVE: https://access.redhat.com/security/cve/CVE-2023-6622
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-6622-netfilter-nf-tables-bail-out-on-mismatching-dynset-and-set-expressions.patch
From: 4.18.0-553.el8_10

CVE-2023-45863, CVSSv2 Score: 6.4
Description:
kobject: Remove docstring reference to kset
CVE: https://access.redhat.com/security/cve/CVE-2023-45863
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-45863-kobject-remove-docstring-reference-to-kset.patch
From: 4.18.0-553.el8_10

CVE-2023-45863, CVSSv2 Score: 6.4
Description:
kobject: modify kobject_get_path() to take a const
CVE: https://access.redhat.com/security/cve/CVE-2023-45863
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-45863-kobject-modify-kobject-get-path-to-take-a-const.patch
From: 4.18.0-553.el8_10

CVE-2023-45863, CVSSv2 Score: 6.4
Description:
kobject: Fix slab-out-of-bounds in fill_kobj_path()
CVE: https://access.redhat.com/security/cve/CVE-2023-45863
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-45863-kobject-fix-slab-out-of-bounds-in-fill-kobj-path.patch
From: 4.18.0-553.el8_10

CVE-2023-52340, CVSSv2 Score: 6.5
Description:
net: add a route cache full diagnostic message
CVE: https://access.redhat.com/security/cve/CVE-2023-52340
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-52340-net-add-a-route-cache-full-diagnostic-message.patch
From: 4.18.0-553.el8_10

CVE-2023-52340, CVSSv2 Score: 6.5
Description:
net/dst: use a smaller percpu_counter batch for dst entries accounting
CVE: https://access.redhat.com/security/cve/CVE-2023-52340
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-52340-net-dst-use-a-smaller-percpu-counter-batch-for-dst-entries-accounting.patch
From: 4.18.0-553.el8_10

CVE-2023-52340, CVSSv2 Score: 6.5
Description:
ipv6: remove max_size check inline with ipv4
CVE: https://access.redhat.com/security/cve/CVE-2023-52340
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-52340-ipv6-remove-max-size-check-inline-with-ipv4.patch
From: 4.18.0-553.el8_10

CVE-2023-52340, CVSSv2 Score: 6.5
Description:
ipv6: Remove extra counter pull before gc
CVE: https://access.redhat.com/security/cve/CVE-2023-52340
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-52340-ipv6-remove-extra-counter-pull-before-gc.patch
From: 4.18.0-553.el8_10

CVE-2019-15505, CVSSv2 Score: 9.8
Description:
media: technisat-usb2: break out of loop at end of
CVE: https://access.redhat.com/security/cve/CVE-2019-15505
Patch: rhel8/4.18.0-553.el8_10/CVE-2019-15505-media-technisat-usb2-break-out-of-loop-at-end-of.patch
From: 4.18.0-553.el8_10

CVE-2023-25775, CVSSv2 Score: 9.8
Description:
RDMA/irdma: Prevent zero-length STAG registration
CVE: https://access.redhat.com/security/cve/CVE-2023-25775
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-25775-rdma-irdma-prevent-zero-length-stag-registration.patch
From: 4.18.0-553.el8_10

CVE-2023-51780, CVSSv2 Score: 8.1
Description:
atm: Fix Use-After-Free in do_vcc_ioctl
CVE: https://access.redhat.com/security/cve/CVE-2023-51780
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-51780-atm-fix-use-after-free-in-do-vcc-ioctl.patch
From: 4.18.0-553.el8_10

CVE-2023-52434, CVSSv2 Score: 8.0
Description:
smb: client: fix potential OOBs in
CVE: https://access.redhat.com/security/cve/CVE-2023-52434
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-52434-smb-client-fix-potential-oobs-in.patch
From: 4.18.0-553.el8_10

CVE-2023-52434, CVSSv2 Score: 8.0
Description:
smb: client: fix parsing of SMB3.1.1 POSIX create
CVE: https://access.redhat.com/security/cve/CVE-2023-52434
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-52434-smb-client-fix-parsing-of-smb3-1-1-posix-create.patch
From: 4.18.0-553.el8_10

CVE-2022-3565, CVSSv2 Score: 7.8
Description:
mISDN: fix use-after-free bugs in l1oip timer
CVE: https://access.redhat.com/security/cve/CVE-2022-3565
Patch: rhel8/4.18.0-553.el8_10/CVE-2022-3565-misdn-fix-use-after-free-bugs-in-l1oip-timer.patch
From: 4.18.0-553.el8_10

CVE-2022-3565, CVSSv2 Score: 7.8
Description:
verify struct l1oip layout
CVE: https://access.redhat.com/security/cve/CVE-2022-3565
Patch: rhel8/4.18.0-553.el8_10/CVE-2022-3565-misdn-fix-use-after-free-bugs-in-l1oip-timer-kpatch.patch
From: 4.18.0-553.el8_10

CVE-2022-45934, CVSSv2 Score: 7.8
Description:
Bluetooth: L2CAP: Fix u8 overflow
CVE: https://access.redhat.com/security/cve/CVE-2022-45934
Patch: rhel8/4.18.0-553.el8_10/CVE-2022-45934-bluetooth-l2cap-fix-u8-overflow.patch
From: 4.18.0-553.el8_10

CVE-2022-0500, CVSSv2 Score:
Description:
Complex adaptation required. Requires changes a lot of constants
CVE:
Patch: skipped/CVE-2022-0500.patch
From:

CVE-2022-23222, CVSSv2 Score:
Description:
Complex adaptation required.
CVE:
Patch: skipped/CVE-2022-23222.patch
From:

CVE-2023-52574, CVSSv2 Score: 4.4
Description:
team: fix null-ptr-deref when team device type is changed
CVE: https://access.redhat.com/security/cve/CVE-2023-52574
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-52574-0725-team-fix-null-ptr-deref-when-team-device-type-is-cha.patch
From: 4.18.0-553.el8_10

CVE-2023-52574, CVSSv2 Score: 4.4
Description:
team: fix null-ptr-deref when team device type is changed
CVE: https://access.redhat.com/security/cve/CVE-2023-52574
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-52574-0725-team-fix-null-ptr-deref-when-team-device-type-is-cha-kpatch.patch
From: 4.18.0-553.el8_10

CVE-2023-3567, CVSSv2 Score: 7.1
Description:
vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
CVE: https://access.redhat.com/security/cve/CVE-2023-3567
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-3567-vc_screen-move-load-of-struct-vc_data-pointer-in-vcs.patch
From: 4.18.0-553.el8_10

CVE-2023-3567, CVSSv2 Score: 7.1
Description:
vc_screen: don't clobber return value in vcs_read
CVE: https://access.redhat.com/security/cve/CVE-2023-3567
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-3567-vc_screen-don-t-clobber-return-value-in-vcs_read.patch
From: 4.18.0-553.el8_10

CVE-2023-52448, CVSSv2 Score: 4.7
Description:
gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
CVE: https://access.redhat.com/security/cve/CVE-2023-52448
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-52448-gfs2-fix-kernel-null-pointer-dereference-in.patch
From: 4.18.0-553.el8_10

CVE-2024-26602, CVSSv2 Score: 4.7
Description:
sched/membarrier: reduce the ability to hammer on sys_membarrier
CVE: https://access.redhat.com/security/cve/CVE-2024-26602
Patch: rhel8/4.18.0-553.el8_10/CVE-2024-26602-sched-membarrier-reduce-the-ability-to-hammer-on.patch
From: 4.18.0-553.el8_10

CVE-2023-42754, CVSSv2 Score: 5.5
Description:
ipv4: fix null-deref in ipv4_link_failure
CVE: https://access.redhat.com/security/cve/CVE-2023-42754
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-42754-ipv4-fix-null-deref-in-ipv4-link-failure.patch
From: 4.18.0-553.el8_10

CVE-2023-52489, CVSSv2 Score:
Description:
The modified structure mem_section_usage is used only during bootup time. As we patch the changes after booting they will have no effect. Therefore we cannot patch this CVE.
CVE:
Patch: skipped/CVE-2023-52489.patch
From:

CVE-2024-26609, CVSSv2 Score:
Description:
CVE has been marked as REJECTED on the NVD website.
CVE:
Patch: skipped/CVE-2024-26609.patch
From:

CVE-2023-52580, CVSSv2 Score: 5.5
Description:
net/core: Fix ETH_P_1588 flow dissector
CVE: https://access.redhat.com/security/cve/CVE-2023-52580
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-52580-net-core-Fix-ETH_P_1588-flow-dissector.patch
From: 4.18.0-553.el8_10

CVE-2023-52620, CVSSv2 Score: 2.5
Description:
netfilter: nf_tables: disallow timeout for anonymous sets
CVE: https://access.redhat.com/security/cve/CVE-2023-52620
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-52620-netfilter-nf_tables-disallow-timeout-for-anonymous-s.patch
From: 4.18.0-553.el8_10

CVE-2024-26671, CVSSv2 Score: 4.4
Description:
blk-mq: fix IO hang from sbitmap wakeup race
CVE: https://access.redhat.com/security/cve/CVE-2024-26671
Patch: rhel8/4.18.0-553.el8_10/CVE-2024-26671-blk-mq-fix-IO-hang-from-sbitmap-wakeup-race.patch
From: 4.18.0-553.el8_10

CVE-2020-25656, CVSSv2 Score: 4.1
Description:
tty: keyboard, do not speculate on func_table index
CVE: https://access.redhat.com/security/cve/CVE-2020-25656
Patch: rhel8/4.18.0-553.el8_10/CVE-2020-25656-0001-tty-keyboard-do-not-speculate-on-func_table-index.patch
From: 4.18.0-553.el8_10

CVE-2020-25656, CVSSv2 Score: 4.1
Description:
tty/vt: fix write/write race in ioctl(KDSKBSENT)
CVE: https://access.redhat.com/security/cve/CVE-2020-25656
Patch: rhel8/4.18.0-553.el8_10/CVE-2020-25656-0002-tty-vt-fix-write-write-race-in-ioctl-KDSKBSENT-handl.patch
From: 4.18.0-553.el8_10

CVE-2020-25656, CVSSv2 Score: 4.1
Description:
vt: keyboard, simplify vt_kdgkbsent
CVE: https://access.redhat.com/security/cve/CVE-2020-25656
Patch: rhel8/4.18.0-553.el8_10/CVE-2020-25656-0003-vt-keyboard-simplify-vt_kdgkbsent.patch
From: 4.18.0-553.el8_10

CVE-2020-25656, CVSSv2 Score: 4.1
Description:
vt: keyboard, extend func_buf_lock to readers
CVE: https://access.redhat.com/security/cve/CVE-2020-25656
Patch: rhel8/4.18.0-553.el8_10/CVE-2020-25656-0004-vt-keyboard-extend-func_buf_lock-to-readers.patch
From: 4.18.0-553.el8_10

CVE-2020-25656, CVSSv2 Score: 4.1
Description:
vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl
CVE: https://access.redhat.com/security/cve/CVE-2020-25656
Patch: rhel8/4.18.0-553.el8_10/CVE-2020-25656-0010-vt-keyboard-rename-i-to-kb_func-in-vt_do_kdgkb_ioctl.patch
From: 4.18.0-553.el8_10

CVE-2020-25656, CVSSv2 Score: 4.1
Description:
vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl
CVE: https://access.redhat.com/security/cve/CVE-2020-25656
Patch: rhel8/4.18.0-553.el8_10/CVE-2020-25656-0011-vt-keyboard-reorder-user-buffer-handling-in-vt_do_kd.patch
From: 4.18.0-553.el8_10

CVE-2021-3753, CVSSv2 Score: 4.7
Description:
vt_kdsetmode: extend console locking
CVE: https://access.redhat.com/security/cve/CVE-2021-3753
Patch: rhel8/4.18.0-553.el8_10/CVE-2021-3753-vt_kdsetmode-extend-console-locking.patch
From: 4.18.0-553.el8_10

CVE-2023-31083, CVSSv2 Score: 4.7
Description:
Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
CVE: https://access.redhat.com/security/cve/CVE-2023-31083
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-31083-Bluetooth-hci_ldisc-check-HCI_UART_PROTO_READY-flag.patch
From: 4.18.0-553.el8_10

CVE-2023-37453, CVSSv2 Score:
Description:
Introduced in the v4.18.0-513.5.1.el8 by 45bf39f8df7f
CVE:
Patch: skipped/CVE-2023-37453.patch
From:

CVE-2023-39194, CVSSv2 Score: 3.2
Description:
net: xfrm: Fix xfrm_address_filter OOB read
CVE: https://access.redhat.com/security/cve/CVE-2023-39194
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-39194-net-xfrm-Fix-xfrm_address_filter-OOB-read.patch
From: 4.18.0-553.el8_10

CVE-2023-6121, CVSSv2 Score: 4.3
Description:
nvmet: nul-terminate the NQNs passed in the connect command
CVE: https://access.redhat.com/security/cve/CVE-2023-6121
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-6121-nvmet-nul-terminate-the-NQNs-passed-in-the-connect-c.patch
From: 4.18.0-553.el8_10

CVE-2023-1513, CVSSv2 Score: 3.3
Description:
kvm: initialize all of the kvm_debugregs structure before sending it to userspace
CVE: https://access.redhat.com/security/cve/CVE-2023-1513
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-1513-kvm-initialize-all-of-the-kvm_debugregs-structure-be.patch
From: 4.18.0-553.el8_10

CVE-2023-39192, CVSSv2 Score: 6.7
Description:
netfilter: xt_u32: validate user space input
CVE: https://access.redhat.com/security/cve/CVE-2023-39192
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-39192-netfilter-xt_u32-validate-user-space-input.patch
From: 4.18.0-553.el8_10

CVE-2023-39192, CVSSv2 Score: 6.7
Description:
netfilter: xt_u32: validate user space input
CVE: https://access.redhat.com/security/cve/CVE-2023-39192
Patch: rhel8/4.18.0-553.el8_10/CVE-2023-39192-netfilter-xt_u32-validate-user-space-input-kpatch.patch
From: 4.18.0-553.el8_10

CVE-2021-47153, CVSSv2 Score: 6.0
Description:
i2c: i801: Don't generate an interrupt on bus reset
CVE: https://access.redhat.com/security/cve/CVE-2021-47153
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2021-47153-i2c-i801-don-t-generate-an-interrupt-on-bus-reset.patch
From: 4.18.0-553.5.1.el8_10

CVE-2020-36777, CVSSv2 Score: 5.5
Description:
media: dvbdev: Fix memory leak in dvb_media_device_free()
CVE: https://access.redhat.com/security/cve/CVE-2020-36777
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2020-36777-media-dvbdev-fix-memory-leak-in-dvb_media_device_free.patch
From: 4.18.0-553.5.1.el8_10

CVE-2021-47171, CVSSv2 Score: 5.5
Description:
net: usb: fix memory leak in smsc75xx_bind
CVE: https://access.redhat.com/security/cve/CVE-2021-47171
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2021-47171-net-usb-fix-memory-leak-in-smsc75xx-bind.patch
From: 4.18.0-553.5.1.el8_10

CVE-2021-47171, CVSSv2 Score: 5.5
Description:
net: usb: fix possible use-after-free in
CVE: https://access.redhat.com/security/cve/CVE-2021-47171
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2021-47171-net-usb-fix-possible-use-after-free-in-smsc75xx_bind.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-6240, CVSSv2 Score: 6.5
Description:
crypto: akcipher - default implementations for request callbacks
CVE: https://access.redhat.com/security/cve/CVE-2023-6240
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-6240-crypto-akcipher-default-implementations-for-request-callbacks.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-6240, CVSSv2 Score: 6.5
Description:
crypto: testmgr - split akcipher tests by a key type
CVE: https://access.redhat.com/security/cve/CVE-2023-6240
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-6240-crypto-testmgr-split-akcipher-tests-by-a-key-type.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-6240, CVSSv2 Score: 6.5
Description:
crypto: akcipher - Disable signing and decryption
CVE: https://access.redhat.com/security/cve/CVE-2023-6240
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-6240-crypto-akcipher-disable-signing-and-decryption.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52520, CVSSv2 Score: 5.5
Description:
platform/x86: think-lmi: Fix reference leak
CVE: https://access.redhat.com/security/cve/CVE-2023-52520
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52520-platform-x86-think-lmi-fix-reference-leak.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26610, CVSSv2 Score: 6.1
Description:
wifi: iwlwifi: fix a memory corruption
CVE: https://access.redhat.com/security/cve/CVE-2024-26610
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26610-wifi-iwlwifi-fix-a-memory-corruption.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52610, CVSSv2 Score: 6.4
Description:
net/sched: act_ct: fix skb leak and crash on ooo frags
CVE: https://access.redhat.com/security/cve/CVE-2023-52610
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52610-net-sched-act-ct-fix-skb-leak-and-crash-on-ooo-frags.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52598, CVSSv2 Score:
Description:
Out of scope as the patch is for s390 arch only, x86_64 is not affected
CVE:
Patch: skipped/CVE-2023-52598.patch
From:

CVE-2022-48669, CVSSv2 Score:
Description:
Out of scope as the patch is for powerpc arch only, x86_64 is not affected
CVE:
Patch: skipped/CVE-2022-48669.patch
From:

CVE-2023-52607, CVSSv2 Score:
Description:
Out of scope as the patch is for powerpc arch only, x86_64 is not affected
CVE:
Patch: skipped/CVE-2023-52607.patch
From:

CVE-2023-52439, CVSSv2 Score: 7.8
Description:
uio: Fix use-after-free in uio_open
CVE: https://access.redhat.com/security/cve/CVE-2023-52439
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52439-uio-fix-use-after-free-in-uio-open.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26593, CVSSv2 Score: 7.1
Description:
i2c: i801: Fix block process call transactions
CVE: https://access.redhat.com/security/cve/CVE-2024-26593
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26593-i2c-i801-fix-block-process-call-transactions.patch
From: 4.18.0-553.5.1.el8_10

CVE-2019-25162, CVSSv2 Score: 7.8
Description:
i2c: Fix a potential use after free
CVE: https://access.redhat.com/security/cve/CVE-2019-25162
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2019-25162-i2c-fix-a-potential-use-after-free.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52445, CVSSv2 Score: 7.8
Description:
media: pvrusb2: fix use after free on context disconnection
CVE: https://access.redhat.com/security/cve/CVE-2023-52445
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52445-media-pvrusb2-fix-use-after-free-on-context.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-23307, CVSSv2 Score: 7.8
Description:
md/raid5: fix atomicity violation in raid5_cache_count
CVE: https://access.redhat.com/security/cve/CVE-2024-23307
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-23307-md-raid5-fix-atomicity-violation-in.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52606, CVSSv2 Score:
Description:
CVE patch is for powerpc arch only
CVE:
Patch: skipped/CVE-2023-52606.patch
From:

CVE-2024-25744, CVSSv2 Score:
Description:
This CVE modifies the functions which won't be available or doesn't make sense to patch as they are used during bootup time or init. Therefore we cannot patch this CVE.
CVE:
Patch: skipped/CVE-2024-25744.patch
From:

CVE-2021-47185, CVSSv2 Score: 4.4
Description:
tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
CVE: https://access.redhat.com/security/cve/CVE-2021-47185
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2021-47185-tty-tty_buffer-Fix-the-softlockup-issue-in-flush_to_.patch
From: 4.18.0-553.5.1.el8_10

CVE-2022-48627, CVSSv2 Score: 4.4
Description:
vt: fix memory overlapping when deleting chars in the buffer
CVE: https://access.redhat.com/security/cve/CVE-2022-48627
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2022-48627-vt-fix-memory-overlapping-when-deleting-chars-in-the.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52477, CVSSv2 Score: 4.4
Description:
usb: hub: Guard against accesses to uninitialized BOS descriptors
CVE: https://access.redhat.com/security/cve/CVE-2023-52477
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52477-usb-hub-Guard-against-accesses-to-uninitialized-BOS-.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52513, CVSSv2 Score: 4.4
Description:
RDMA/siw: Fix connection failure handling
CVE: https://access.redhat.com/security/cve/CVE-2023-52513
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52513-RDMA-siw-Fix-connection-failure-handling.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52528, CVSSv2 Score: 4.4
Description:
net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
CVE: https://access.redhat.com/security/cve/CVE-2023-52528
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52528-net-usb-smsc75xx-Fix-uninit-value-access-in-__smsc75.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52594, CVSSv2 Score: 4.4
Description:
wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
CVE: https://access.redhat.com/security/cve/CVE-2023-52594
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52594-wifi-ath9k-Fix-potential-array-index-out-of-bounds-r.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52595, CVSSv2 Score: 4.4
Description:
wifi: rt2x00: restart beacon queue when hardware reset
CVE: https://access.redhat.com/security/cve/CVE-2023-52595
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52595-wifi-rt2x00-restart-beacon-queue-when-hardware-reset.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26872, CVSSv2 Score: 4.4
Description:
RDMA/srpt: Do not register event handler until srpt device is fully setup
CVE: https://access.redhat.com/security/cve/CVE-2024-26872
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26872-RDMA-srpt-Do-not-register-event-handler-until-srpt-d.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26892, CVSSv2 Score: 4.4
Description:
wifi: mt76: mt7921e: fix use-after-free in free_irq()
CVE: https://access.redhat.com/security/cve/CVE-2024-26892
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26892-wifi-mt76-mt7921e-fix-use-after-free-in-free_irq.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52565, CVSSv2 Score:
Description:
The given kernel version isn't vulnerable.
CVE:
Patch: skipped/CVE-2023-52565.patch
From:

CVE-2021-47055, CVSSv2 Score: N/A
Description:
mtd: properly check all write ioctls for permissions
CVE: https://access.redhat.com/security/cve/CVE-2021-47055
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2021-47055-mtd-properly-check-all-write-ioctls-for-permissions.patch
From: 4.18.0-553.5.1.el8_10

CVE-2021-47055, CVSSv2 Score: N/A
Description:
mtd: require write permissions for locking and badblock ioctls
CVE: https://access.redhat.com/security/cve/CVE-2021-47055
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2021-47055-mtd-require-write-permissions-for-locking-and-badblo.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26897, CVSSv2 Score:
Description:
WiFi - Complex adaptation required.
CVE:
Patch: skipped/CVE-2024-26897.patch
From:

CVE-2024-27052, CVSSv2 Score: 5.5
Description:
wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
CVE: https://access.redhat.com/security/cve/CVE-2024-27052
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-27052-wifi-rtl8xxxu-add-cancel-work-sync-for.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26743, CVSSv2 Score: 5.5
Description:
RDMA/qedr: Fix qedr_create_user_qp error flow
CVE: https://access.redhat.com/security/cve/CVE-2024-26743
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26743-rdma-qedr-fix-qedr-create-user-qp-error-flow.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26779, CVSSv2 Score: 5.5
Description:
wifi: mac80211: fix race condition on enabling
CVE: https://access.redhat.com/security/cve/CVE-2024-26779
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26779-wifi-mac80211-fix-race-condition-on-enabling.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26901, CVSSv2 Score: 5.5
Description:
do_sys_name_to_handle(): use kzalloc() to fix
CVE: https://access.redhat.com/security/cve/CVE-2024-26901
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26901-do-sys-name-to-handle-use-kzalloc-to-fix.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26919, CVSSv2 Score:
Description:
The given kernel version isn't vulnerable.
CVE:
Patch: skipped/CVE-2024-26919.patch
From:

CVE-2024-26933, CVSSv2 Score: 5.5
Description:
USB: core: Add hub_get() and hub_put() routines
CVE: https://access.redhat.com/security/cve/CVE-2024-26933
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26933-4056-USB-core-Add-hub_get-and-hub_put-routines.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26933, CVSSv2 Score: 5.5
Description:
USB: core: Fix deadlock in port "disable" sysfs attribute
CVE: https://access.redhat.com/security/cve/CVE-2024-26933
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26933-4057-USB-core-Fix-deadlock-in-port-disable-sysfs-attribut-477.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26934, CVSSv2 Score: 5.5
Description:
USB: core: Fix deadlock in
CVE: https://access.redhat.com/security/cve/CVE-2024-26934
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26934-usb-core-fix-deadlock-in-4.18.0-477.27.1.el8_8.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26964, CVSSv2 Score: 5.5
Description:
USB: core: Add hub_get() and hub_put() routines
CVE: https://access.redhat.com/security/cve/CVE-2024-26964
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26964-4060-usb-xhci-Add-error-handling-in-xhci_map_urb_for_dma.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26973, CVSSv2 Score: 5.5
Description:
fat: fix uninitialized field in nostale filehandles
CVE: https://access.redhat.com/security/cve/CVE-2024-26973
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26973-fat-fix-uninitialized-field-in-nostale-filehandles.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26993, CVSSv2 Score: 5.5
Description:
fs: sysfs: Fix reference leak in sysfs_break_active_protection()
CVE: https://access.redhat.com/security/cve/CVE-2024-26993
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26993-fs-sysfs-fix-reference-leak-in.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-0340, CVSSv2 Score: 5.5
Description:
vhost: use kzalloc() instead of kmalloc() followed by memset()
CVE: https://access.redhat.com/security/cve/CVE-2024-0340
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-0340-vhost-use-kzalloc-instead-of-kmalloc-followed-by-mem.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26603, CVSSv2 Score: 5.5
Description:
x86/fpu: Stop relying on userspace for info to
CVE: https://access.redhat.com/security/cve/CVE-2024-26603
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26603-x86-fpu-Stop-relying-on-userspace-for-info-to-fault-.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26615, CVSSv2 Score: 5.5
Description:
net/smc: fix illegal rmb_desc access in SMC-D connection dump
CVE: https://access.redhat.com/security/cve/CVE-2024-26615
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26615-net-smc-fix-illegal-rmb_desc-access-in-SMC-D-connect-477.27.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26642, CVSSv2 Score: 5.5
Description:
netfilter: nf_tables: disallow anonymous set with timeout flag
CVE: https://access.redhat.com/security/cve/CVE-2024-26642
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26642-netfilter-nf_tables-disallow-anonymous-set-with.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26643, CVSSv2 Score:
Description:
The given kernel version isn't vulnerable (Netfilter).
CVE:
Patch: skipped/CVE-2024-26643.patch
From:

CVE-2024-26664, CVSSv2 Score: 5.5
Description:
hwmon: (coretemp) Fix out-of-bounds memory access
CVE: https://access.redhat.com/security/cve/CVE-2024-26664
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26664-hwmon-coretemp-Fix-out-of-bounds-memory-access.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26693, CVSSv2 Score:
Description:
The given kernel version isn't vulnerable (WiFi).
CVE:
Patch: skipped/CVE-2024-26693.patch
From:

CVE-2024-26694, CVSSv2 Score:
Description:
The given kernel version isn't vulnerable (WiFi).
CVE:
Patch: skipped/CVE-2024-26694.patch
From:

CVE-2024-27059, CVSSv2 Score: 5.5
Description:
USB: usb-storage: Prevent divide-by-0 error in
CVE: https://access.redhat.com/security/cve/CVE-2024-27059
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-27059-usb-usb-storage-prevent-divide-by-0-error-in.patch
From: 4.18.0-553.5.1.el8_10

CVE-2021-47013, CVSSv2 Score: 5.1
Description:
net:emac/emac-mac: Fix a use after free in
CVE: https://access.redhat.com/security/cve/CVE-2021-47013
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2021-47013-net-emac-emac-mac-fix-a-use-after-free-in.patch
From: 4.18.0-553.5.1.el8_10

CVE-2021-46934, CVSSv2 Score: 4.4
Description:
i2c: validate user data in compat ioctl
CVE: https://access.redhat.com/security/cve/CVE-2021-46934
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2021-46934-i2c-validate-user-data-in-compat-ioctl.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26659, CVSSv2 Score: 5.5
Description:
xhci: process isoc TD properly when there was a
CVE: https://access.redhat.com/security/cve/CVE-2024-26659
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26659-xhci-process-isoc-td-properly-when-there-was-a.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26659, CVSSv2 Score: 5.5
Description:
xhci: process isoc TD properly when there was a transaction error mid TD kpatch
CVE: https://access.redhat.com/security/cve/CVE-2024-26659
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26659-xhci-process-isoc-td-properly-when-there-was-a-kpatch.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26659, CVSSv2 Score: 5.5
Description:
xhci: handle isoc Babble and Buffer Overrun events
CVE: https://access.redhat.com/security/cve/CVE-2024-26659
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26659-xhci-handle-isoc-babble-and-buffer-overrun-events.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-27014, CVSSv2 Score: 5.5
Description:
net/mlx5e: Prevent deadlock while disabling aRFS
CVE: https://access.redhat.com/security/cve/CVE-2024-27014
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-27014-net-mlx5e-Prevent-deadlock-while-disabling-aRFS-from-477.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-27014, CVSSv2 Score: 5.5
Description:
net/mlx5e: Prevent deadlock while disabling aRFS
CVE: https://access.redhat.com/security/cve/CVE-2024-27014
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-27014-net-mlx5e-Prevent-deadlock-while-disabling-aRFS-from-477-kpatch.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-27056, CVSSv2 Score: 5.5
Description:
wifi: iwlwifi: mvm: ensure offloading TID queue exists
CVE: https://access.redhat.com/security/cve/CVE-2024-27056
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-27056-wifi-iwlwifi-mvm-ensure-offloading-TID-queue-exists-upto-477.27.1.patch
From: 4.18.0-553.5.1.el8_10

CVE-2021-47118, CVSSv2 Score:
Description:
No sense in patching an early boot function; inventing a runtime-wise patch is not impossible but isn't worth the effort for 4.4 score CVE
CVE:
Patch: skipped/CVE-2021-47118.patch
From:

CVE-2023-52578, CVSSv2 Score: 4.7
Description:
net: add atomic_long_t to net_device_stats fields
CVE: https://access.redhat.com/security/cve/CVE-2023-52578
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52578-0001-net-add-atomic_long_t-to-net_device_stats-fields-from-477.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52578, CVSSv2 Score: 4.7
Description:
net: bridge: use DEV_STATS_INC()
CVE: https://access.redhat.com/security/cve/CVE-2023-52578
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52578-0002-net-bridge-use-DEV_STATS_INC-from-372.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52578, CVSSv2 Score: 4.7
Description:
net: Fix unwanted sign extension in netdev_stats_to_stats64()
CVE: https://access.redhat.com/security/cve/CVE-2023-52578
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52578-0003-net-Fix-unwanted-sign-extension-in-netdev_stats_to_s.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52578, CVSSv2 Score: 4.7
Description:
net: add atomic_long_t to net_device_stats fields
CVE: https://access.redhat.com/security/cve/CVE-2023-52578
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2023-52578-0004-net-add-atomic_long_t-to-net_device_stats-fields-from-477-kpatch.patch
From: 4.18.0-553.5.1.el8_10

CVE-2024-26744, CVSSv2 Score: 5.5
Description:
RDMA/srpt: Support specifying the srpt_service_guid
CVE: https://access.redhat.com/security/cve/CVE-2024-26744
Patch: rhel8/4.18.0-553.5.1.el8_10/CVE-2024-26744-rdma-srpt-support-specifying-the-srpt-service-guid-kpatch.patch
From: 4.18.0-553.5.1.el8_10

CVE-2023-52669, CVSSv2 Score:
Description:
CVE patch is for s390 arch only
CVE:
Patch: skipped/CVE-2023-52669.patch
From:

CVE-2023-52675, CVSSv2 Score:
Description:
CVE patch is for powerpc arch only
CVE:
Patch: skipped/CVE-2023-52675.patch
From:

CVE-2023-52686, CVSSv2 Score:
Description:
CVE patch is for powerpc arch only
CVE:
Patch: skipped/CVE-2023-52686.patch
From:

CVE-2023-52703, CVSSv2 Score: 3.3
Description:
net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
CVE: https://access.redhat.com/security/cve/CVE-2023-52703
Patch: rhel8/4.18.0-553.8.1.el8_10/CVE-2023-52703-net-usb-kalmia-Don-t-pass-act_len-in-usb_bulk_msg-error-path.patch
From: 4.18.0-553.8.1.el8_10

CVE-2023-52813, CVSSv2 Score: 5.5
Description:
crypto: pcrypt - Fix hungtask for PADATA_RESET
CVE: https://access.redhat.com/security/cve/CVE-2023-52813
Patch: rhel8/4.18.0-553.8.1.el8_10/CVE-2023-52813-crypto-pcrypt-Fix-hungtask-for-PADATA_RESET.patch
From: 4.18.0-553.8.1.el8_10

CVE-2023-52700, CVSSv2 Score: 5.5
Description:
tipc: fix kernel warning when sending SYN message
CVE: https://access.redhat.com/security/cve/CVE-2023-52700
Patch: rhel8/4.18.0-553.8.1.el8_10/CVE-2023-52700-tipc-fix-kernel-warning-when-sending-SYN-message.patch
From: 4.18.0-553.8.1.el8_10

CVE-2023-52835, CVSSv2 Score: 5.5
Description:
perf/core: Bail out early if the request AUX area is out of bound
CVE: https://access.redhat.com/security/cve/CVE-2023-52835
Patch: rhel8/4.18.0-553.8.1.el8_10/CVE-2023-52835-perf-core-Bail-out-early-if-the-request-AUX-area-is-out-of-bound.patch
From: 4.18.0-553.8.1.el8_10

CVE-2023-52781, CVSSv2 Score: 4.4
Description:
usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
CVE: https://access.redhat.com/security/cve/CVE-2023-52781
Patch: rhel8/4.18.0-553.8.1.el8_10/CVE-2023-52781-usb-config-fix-iteration-issue-in-usb_get_bos_descriptor-477.patch
From: 4.18.0-553.8.1.el8_10

CVE-2023-52877, CVSSv2 Score: 4.4
Description:
usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
CVE: https://access.redhat.com/security/cve/CVE-2023-52877
Patch: rhel8/4.18.0-553.8.1.el8_10/CVE-2023-52877-usb-typec-tcpm-Fix-NULL-pointer-dereference-in-tcpm_pd_svdm.patch
From: 4.18.0-553.8.1.el8_10

CVE-2023-52667, CVSSv2 Score: 5.5
Description:
net/mlx5e: fix a potential double-free in fs_any_create_groups
CVE: https://access.redhat.com/security/cve/CVE-2023-52667
Patch: rhel8/4.18.0-553.8.1.el8_10/CVE-2023-52667-net-mlx5e-fix-a-potential-double-free-in-fs_any_create_groups.patch
From: 4.18.0-553.8.1.el8_10

CVE-2023-52878, CVSSv2 Score: 4.4
Description:
can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
CVE: https://access.redhat.com/security/cve/CVE-2023-52878
Patch: rhel8/4.18.0-553.8.1.el8_10/CVE-2023-52878-can-dev-can_put_echo_skb-don-t-crash-kernel-if-can_priv::echo_skb-is-accessed-out-of-bounds.patch
From: 4.18.0-553.8.1.el8_10

CVE-2023-52464, CVSSv2 Score: 2.9
Description:
EDAC/thunderx: Fix possible out-of-bounds string access
CVE: https://access.redhat.com/security/cve/CVE-2023-52464
Patch: rhel8/4.18.0-553.8.1.el8_10/CVE-2023-52464-EDAC_thunderx-Fix-possible-out-of-bounds-string-access.patch
From: 4.18.0-553.8.1.el8_10

CVE-2024-26907, CVSSv2 Score: 6.7
Description:
RDMA/mlx5: Fix fortify source warning while accessing Eth segment
CVE: https://access.redhat.com/security/cve/CVE-2024-26907
Patch: rhel8/4.18.0-553.8.1.el8_10/CVE-2024-26907-RDMA_mlx5-Fix-fortify-source-warning-while-accessing-Eth-segment.patch
From: 4.18.0-553.8.1.el8_10

CVE-2024-27397, CVSSv2 Score:
Description:
netfilter: Complex adaptation required.
CVE:
Patch: skipped/CVE-2024-27397.patch
From:

N/A, CVSSv2 Score: N/A
Description:
x86 xen add xenpv restore regs and return to usermode
CVE: N/A
Patch: 4.18.0/x86-xen-Add-xenpv_restore_regs_and_return_to_usermode-el8-372.patch
From: N/A

N/A, CVSSv2 Score: N/A
Description:
kpatch add alt asm definitions
CVE: N/A
Patch: 4.18.0/kpatch-add-alt-asm-definitions-el8-372.patch
From: N/A

N/A, CVSSv2 Score: N/A
Description:
kpatch add paravirt asm definitions
CVE: N/A
Patch: 4.18.0/0003-kpatch-add-paravirt-asm-definitions.patch
From: N/A