Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Important

A flaw was found in the Linux kernel. Inconsistent handling of local Forwarding Database (FDB) entries in the bridge networking component's RCU (Read-Copy-Update) readers can lead to a null-pointer dereference. A local attacker could exploit this by triggering a concurrent update to an FDB entry, causing the system to crash and resulting in a Denial of Service (DoS).

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

A flaw was found in the Linux kernel's Transparent Inter-Process Communication (TIPC) module. This vulnerability, a double-free, occurs when the `tipc_buf_append()` function incorrectly handles memory after a socket buffer (skb) reallocation. An attacker could potentially exploit this to cause system instability or a denial of service. In some scenarios, this type of memory corruption could also lead to arbitrary code execution.

CWE-763 - Release of Invalid Pointer or Reference

A flaw was found in the Linux kernel's IPv6 (Internet Protocol version 6) implementation. This vulnerability, a Use-After-Free (UAF) error, occurs due to incorrect caching of network packet addresses before a memory operation. An attacker could potentially exploit this flaw to cause memory corruption, which may lead to a denial of service or, in some scenarios, arbitrary code execution.

CWE-825 - Expired Pointer Dereference