Important: kernel-rt security and bug fix update
Summary
ALSA-2023:3350: Important: kernel-rt security and bug fix update. Affects kernel-rt versions < 4.18.0-477.13.1.rt7.276.el8_8. Fixed in 4.18.0-477.13.1.rt7.276.el8_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Vulnerability Detail
A use-after-free vulnerability in nf_tables when processing batch requests can lead to privilege escalation. This vulnerability is identified as CVE-2023-32233. It can be exploited to gain elevated privileges and potentially compromise the system.
How To Fix
Minimum fixed version
4.18.0-477.13.1.rt7.276.el8_8
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
It is crucial to update the affected kernel-rt packages to the recommended version or later to mitigate the risk of privilege escalation. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for kernel-rt →
FAQ
This vulnerability can be exploited to gain elevated privileges, potentially leading to unauthorized access and control of the affected system.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply provide the manifest file (e.g., package-lock.json) of your application, and Vulert will analyze it in real-time.
At the time of this advisory, there are no known public exploits for this vulnerability. However, it is important to apply the recommended security update to mitigate the risk.
To exploit this vulnerability, an attacker would need to have the ability to send malicious batch requests to the nf_tables component of the kernel-rt package.
The vulnerability was discovered by an undisclosed security researcher and reported to the kernel-rt package maintainers.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
