Red Hat Security Advisory: kernel update

Important

A flaw was found in the Linux kernel's `eventpoll` component. In certain situations, the `ep_free()` function in `eventpoll.c` can prematurely free the `eventpoll` data structure while it is still being used by another concurrent thread. This use-after-free (UAF) vulnerability could allow a local attacker to cause a denial of service or potentially escalate privileges.

CWE-825 - Expired Pointer Dereference

A flaw was found in the Linux kernel's `eventpoll` mechanism. A Use-After-Free (UAF) vulnerability, where the system attempts to access memory after it has been freed, can occur during the removal of a file. A local attacker could exploit this race condition to corrupt memory, potentially leading to privilege escalation or arbitrary code execution. This allows an attacker to gain elevated control over the system.

CWE-825 - Expired Pointer Dereference

A flaw was found in the Linux kernel's netfilter bridge ebtables SNAT (Source Network Address Translation) module. This vulnerability allows a local attacker on a system configured with specific bridge netfilter rules to improperly modify underlying memory pages during an ARP (Address Resolution Protocol) sender hardware address rewrite. This could lead to unintended system behavior, a denial of service, or potentially local privilege escalation, where an attacker gains higher access rights than intended.

CWE-825 - Expired Pointer Dereference