Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

• CVE-2023-5178 High 8.8 Kernel: use after free in nvmet_tcp_free_crypto in nvme 9.6%
• CVE-2023-5367 High 7.8 Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty 0.6%
• CVE-2023-5633 High 7.8 Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling 0.3%
• CVE-2023-5557 High 7.5 Tracker-miners: sandbox escape 0.8%
• CVE-2023-39191 High 8.2 Kernel: ebpf: insufficient stack type checks in dynptr 0.5%
• CVE-2023-42753 High 7.0 Kernel: netfilter: potential slab-out-of-bound access due to integer underflow 0.5%
• CVE-2023-39418 Low 3.1 Postgresql: merge fails to enforce update or select row security policies 1.1%
• CVE-2023-39417 High 7.5 Postgresql: extension script @substitutions@ within quoting allow sql injection 1.7%
• CVE-2023-33951 Medium 6.7 Kernel: vmwgfx: race condition leading to information disclosure vulnerability 0.3%
• CVE-2023-3812 High 7.8 Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags 0.3%
• CVE-2023-3567 High 7.1 Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race 0.4%
• CVE-2023-33952 Medium 6.7 Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects 0.5%
• CVE-2023-34966 High 7.5 Samba: infinite loop in mdssvc rpc service for spotlight 62.4%