Red Hat Security Advisory: kernel security update

Important

A flaw was found in the Linux kernel. A local user could exploit a shift-out-of-bounds vulnerability within the `ntb_hw_switchtec` module. This vulnerability arises when the `ntb_mw_clear_trans()` application programming interface (API) processes zero values for address and size, leading to an invalid memory access. Successful exploitation could result in information disclosure and denial of service.

CWE-125 - Out-of-bounds Read

A flaw was found in the Linux kernel's erofs filesystem. A local attacker could exploit a use-after-free (UAF) vulnerability by mounting an erofs filesystem with a specific configuration where the primary and extra devices have mismatched types. This improper handling of device initialization errors could lead to a system crash (denial of service) or potentially allow a local attacker to execute arbitrary code, thereby gaining full control over the affected system.

CWE-390 - Detection of Error Condition Without Action

A use-after-free flaw was found in io_uring/msg_ring in the Linux Kernel. In this flaw io_kiocb freeing is deferred for RCU which can lead to a kernel information leak problem.

CWE-825 - Expired Pointer Dereference