Red Hat Security Advisory

RHSA-2024:10274

kernel security update

Released 2024-11-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-503.15.1.el9_5, libperf-5.14.0-503.15.1.el9_5
Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-503.15.1.el9_5, kernel-64k-debug-devel-matched-5.14.0-503.15.1.el9_5, kernel-64k-devel-5.14.0-503.15.1.el9_5 +11
Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.4.0-503.15.1.el9_5, kernel-5.14.0-503.15.1.el9_5, kernel-64k-5.14.0-503.15.1.el9_5 +30
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-503.15.1.el9_5, kernel-rt-core-5.14.0-503.15.1.el9_5, kernel-rt-debug-5.14.0-503.15.1.el9_5 +9
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-503.15.1.el9_5, kernel-rt-core-5.14.0-503.15.1.el9_5, kernel-rt-debug-5.14.0-503.15.1.el9_5 +11

Fixes 4 records

TI-2024-33668 CVE-2024-50226 · GHSA-2742-r3c2-2qgj

cxl/port: Fix use-after-free, permit out-of-order decoder shutdown

LOW 36

In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown In support of investigating an initialization failure report [1], cxl_test was update…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00239 Published 2024-11-09 Partial fix · 6.1.191, 6.6.60 +2 CWE-416

TI-2024-27371 CVE-2024-41009 · GHSA-qvfw-rqcg-jh9g

bpf: Fix overrunning reservations in ringbuf

LOW 34

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf The BPF ring buffer internally is implemented as a power-of-2 sized circular buffer, with two logical and e…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00272 Published 2024-07-17 Partial fix · 5.10.223, 5.15.164 +4 CWE-770

TI-2024-28234 CVE-2024-42244 · GHSA-g9q3-4xq5-wqcj

USB: serial: mos7840: fix crash on resume

LOW 24

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mos7840: fix crash on resume Since commit c49cfa917025 ("USB: serial: use generic method if no alternative is provided in usb serial layer"…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00229 Published 2024-08-07 Partial fix · 5.10.222, 5.15.163 +4

TI-2024-31105 CVE-2024-46679 · GHSA-c2m5-hm36-mq75

ethtool: check device is present when getting link settings

LOW 21

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when…

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00246 Published 2024-09-13 Partial fix · 5.4.283, 5.10.225 +5