Read the docs
Red Hat Security Advisory

RHSA-2024:10281

kernel:4.18.0 security update

Released 2024-11-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2024-31279 CVE-2024-46858 · GHSA-4mm4-rvx3-h58h

mptcp: pm: Fix uaf in __timer_delete_sync

Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in __timer_delete_sync There are two paths to access mptcp_pm_del_add_timer, result in a race condition: CPU1 CPU2 ==== ==== net_rx_a…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00591 Published 2024-09-27 Partial fix · 5.10.227, 5.15.168 +4 CWE-416
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00239 Published 2024-06-19 Partial fix · 6.6.33, 6.8.12 +2
TI-2024-17907 CVE-2024-27043 · GHSA-q2m9-j68q-x65j

media: edia: dvbdev: fix a use-after-free

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: media: edia: dvbdev: fix a use-after-free In dvb_register_device, *pdvbdev is set equal to dvbdev, which is freed in several error-handling paths.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00294 Published 2024-05-01 Partial fix · 4.19.311, 5.4.273 +7 CWE-416
Priority LOW 25

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout There is a race condition between l2cap_chan_timeout() and l2cap_chan_del().

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00304 Published 2024-05-13 Partial fix · 4.19.314, 5.4.276 +6 CWE-476