{"id":"RHSA-2023:3708","summary":"Red Hat Security Advisory: kernel-rt security and bug fix update","modified":"2026-03-11T07:23:12.049156Z","published":"2024-09-25T17:35:48Z","upstream":["CVE-2023-2002","CVE-2023-2124","CVE-2023-2194","CVE-2023-2235","CVE-2023-28466","CVE-2023-32233"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2023:3708"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179000"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2187308"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2187439"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188396"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2192589"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196105"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3708.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-2002"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-2002"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2002"},{"type":"ARTICLE","url":"https://www.openwall.com/lists/oss-security/2023/04/16/3"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-2124"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-2124"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2124"},{"type":"ARTICLE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/xfs/xfs_buf_item_recover.c?h=v6.4-rc1&id=22ed903eee23a5b174e240f1cdfa9acf393a5210"},{"type":"ARTICLE","url":"https://lore.kernel.org/linux-xfs/20230412214034.GL3223426@dread.disaster.area/T/#m1ebbcd1ad061d2d33bef6f0534a2b014744d152d"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-2194"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-2194"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2194"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-2235"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-2235"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2235"},{"type":"ARTICLE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fd0815f632c24878e325821943edccc7fde947a2"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-28466"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-28466"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28466"},{"type":"ARTICLE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=49c47cc21b5b7a3d8deb18fc57b0aa2ab1286962"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-32233"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-32233"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32233"},{"type":"ARTICLE","url":"https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab"},{"type":"ARTICLE","url":"https://www.openwall.com/lists/oss-security/2023/05/08/4"}],"affected":[{"package":{"name":"kernel-rt","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-core","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-debug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-core","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-debug-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-debug-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-devel","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-debug-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-kvm","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-debug-kvm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-modules","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-debug-modules"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-modules-core","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-debug-modules-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-modules-extra","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-debug-modules-extra"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debuginfo-common-x86_64","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-devel","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-kvm","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-kvm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-modules","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-modules"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-modules-core","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-modules-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-modules-extra","ecosystem":"Red Hat:enterprise_linux:9::nfv","purl":"pkg:rpm/redhat/kernel-rt-modules-extra"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-core","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-debug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-core","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-debug-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-debug-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-devel","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-debug-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-kvm","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-debug-kvm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-modules","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-debug-modules"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-modules-core","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-debug-modules-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debug-modules-extra","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-debug-modules-extra"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-debuginfo-common-x86_64","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-devel","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-kvm","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-kvm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-modules","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-modules"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-modules-core","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-modules-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}},{"package":{"name":"kernel-rt-modules-extra","ecosystem":"Red Hat:enterprise_linux:9::realtime","purl":"pkg:rpm/redhat/kernel-rt-modules-extra"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2023:3708.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}