What is RHSA-2023:4515?

RHSA-2023:4515 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: kernel security update

Which CVE IDs does RHSA-2023:4515 cover?

RHSA-2023:4515 covers the following CVE IDs: CVE-2023-1829, CVE-2023-2124, CVE-2023-3090, CVE-2023-35788. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2023:4515?

RHSA-2023:4515 has a CVSS v3 base score of 7.8, published by Red Hat Product Security.

Which products are affected by RHSA-2023:4515?

RHSA-2023:4515 affects 48 products, including: Red Hat Enterprise Linux BaseOS E4S (v. 8.1); bpftool-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1); bpftool-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1); bpftool-debuginfo-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1); bpftool-debuginfo-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1); and others — see the full list on the advisory page.

RHSA-2023:4515HighCVSS 7.8

Red Hat Security Advisory: kernel security update

Vendor

Red Hat Product Security

Published

August 8, 2023

Last Modified

August 10, 2026

🔗 CVE IDs covered (4)

CVE-2023-1829 →CVE-2023-2124 →CVE-2023-3090 →CVE-2023-35788 →

📋 Description

CVE-2023-1829 — kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter CVE-2023-2124 — kernel: OOB access in the Linux kernel's XFS subsystem CVE-2023-3090 — kernel: ipvlan: out-of-bounds write caused by unclear skb->cb CVE-2023-35788 — kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt()

🎯 Affected products48

Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
bpftool-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
bpftool-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
bpftool-debuginfo-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
bpftool-debuginfo-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-0:4.18.0-147.87.1.el8_1.src as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-abi-whitelists-0:4.18.0-147.87.1.el8_1.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-core-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-core-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debug-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debug-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debug-core-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debug-core-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debug-debuginfo-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debug-debuginfo-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debug-devel-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debug-devel-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debug-modules-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debug-modules-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debug-modules-extra-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debug-modules-extra-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debuginfo-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debuginfo-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debuginfo-common-ppc64le-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-debuginfo-common-x86_64-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-devel-0:4.18.0-147.87.1.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-devel-0:4.18.0-147.87.1.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
kernel-doc-0:4.18.0-147.87.1.el8_1.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1)
+18 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this issue, prevent the module cls_tcindex from being loaded. Please see https://access.redhat.com/solutions/41278 on how to blacklist a kernel module to prevent it from loading automatically. Workaround: This flaw can be mitigated by preventing the affected `ipvlan` kernel module from being loaded. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278. Workaround: This flaw can be mitigated by preventing the affected `cls_flower` kernel module from being loaded. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278.

🔗 CVE IDs covered (4)

📋 Description

🎯 Affected products48

✅ Remediation

🔗 References (7)