Red Hat Security Advisory: kernel security update

Important

A flaw was found in the Linux kernel's Controller Area Network (CAN) broadcast manager (BCM). Improper locking during runtime updates of internal counters in the bcm_can_tx() function allows a local attacker to trigger a slab-out-of-bounds read access. This vulnerability can lead to information disclosure or a denial of service (DoS) condition, potentially compromising system stability or sensitive data.

CWE-125 - Out-of-bounds Read

A flaw was found in the Linux kernel's `io_uring/poll` component. A logic error exists in the `io_poll_get_ownership()` function due to an incorrect signed comparison. This flaw prevents the necessary slowpath from being triggered when the `IO_POLL_CANCEL_FLAG` is set, potentially leading to unexpected behavior or resource mismanagement within the kernel.

CWE-1024 - Comparison of Incompatible Types

A flaw was found in the Linux kernel's netfilter component, specifically within the Network Address Translation (NAT) subsystem. This vulnerability involves improper memory management when releasing network filter operation structures. This could potentially allow an attacker to cause a system crash, leading to a Denial of Service (DoS), or to gain unauthorized access to sensitive information due to the partial exposure of internal hook data during error handling.

CWE-763 - Release of Invalid Pointer or Reference