Red Hat Security AdvisoryRHSA-2024:10281
kernel:4.18.0 security update
Released 2024-11-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.30.1.el8_10, kernel-4.18.0-553.30.1.el8_10, kernel-abi-stablelists-4.18.0-553.30.1.el8_10 +19
- Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.30.1.el8_10
Fixes 4 records
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in __timer_delete_sync There are two paths to access mptcp_pm_del_add_timer, result in a race condition: CPU1 CPU2 ==== ==== net_rx_a…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00591 · Published 2024-09-27 · Partial fix · 5.10.227, 5.15.168 +4 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00239 · Published 2024-06-19 · Partial fix · 6.6.33, 6.8.12 +2
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: media: edia: dvbdev: fix a use-after-free In dvb_register_device, *pdvbdev is set equal to dvbdev, which is freed in several error-handling paths.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00294 · Published 2024-05-01 · Partial fix · 4.19.311, 5.4.273 +7 CWE-416
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout There is a race condition between l2cap_chan_timeout() and l2cap_chan_del().
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00304 · Published 2024-05-13 · Partial fix · 4.19.314, 5.4.276 +6 CWE-476