Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Important

A flaw was found in the Linux kernel's Controller Area Network (CAN) broadcast manager (BCM). Improper locking during runtime updates of internal counters in the bcm_can_tx() function allows a local attacker to trigger a slab-out-of-bounds read access. This vulnerability can lead to information disclosure or a denial of service (DoS) condition, potentially compromising system stability or sensitive data.

CWE-125 - Out-of-bounds Read

A flaw was found in the Linux kernel. Missing null pointer checks in the IPv6 Segment Routing (SRv6) implementation, specifically within the `seg6_hmac_validate_skb()` and `ipv6_srh_rcv()` functions, can occur when an IPv6 device lacks proper configuration. This oversight may allow an attacker to trigger a null pointer dereference, potentially leading to a system crash and a Denial of Service (DoS).

CWE-476 - NULL Pointer Dereference

A flaw was found in the Linux kernel's User Datagram Protocol (UDP) implementation. When a significant number of UDP sockets are bound to specific local addresses on the same port, the kernel's conflict detection mechanism can fail. This allows a local attacker to bind to a wildcard address on a port that should already be in use, potentially leading to a Denial of Service (DoS) for legitimate applications attempting to use that port.

CWE-253 - Incorrect Check of Function Return Value