Red Hat Security AdvisoryRHSA-2024:10939
kernel security update
Released 2024-12-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-503.16.1.el9_5, libperf-5.14.0-503.16.1.el9_5
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-503.16.1.el9_5, kernel-64k-debug-devel-matched-5.14.0-503.16.1.el9_5, kernel-64k-devel-5.14.0-503.16.1.el9_5 +11
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.4.0-503.16.1.el9_5, kernel-5.14.0-503.16.1.el9_5, kernel-64k-5.14.0-503.16.1.el9_5 +30
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-503.16.1.el9_5, kernel-rt-core-5.14.0-503.16.1.el9_5, kernel-rt-debug-5.14.0-503.16.1.el9_5 +9
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-503.16.1.el9_5, kernel-rt-core-5.14.0-503.16.1.el9_5, kernel-rt-debug-5.14.0-503.16.1.el9_5 +11
Fixes 7 records
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions check in inode_setsecctx hook Marek Gresko reports that the root user on an NFS client is able to change the sec…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00531 · Published 2024-09-13 · Partial fix · 5.10.227, 5.15.168 +4 CWE-276
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: iommu: Restore lost return in iommu_report_device_fault() When iommu_report_device_fault gets called with a partial fault it is supposed to collect the…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00194 · Published 2024-09-04 · Fixed in 6.10.7, 6.11
Priority LOW 28
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() If access to offset + length is larger than the skbuff length, then skb…
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00534 · Published 2024-11-09 · Partial fix · 4.19.323, 5.4.285 +6
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdisc_pkt_len_init() with UFO After commit 7c6d2ecbda83 ("net: be more gentle about silly gso requests coming from use…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0028 · Published 2024-10-21 · Partial fix · 4.19.323, 5.4.285 +8 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialise extack before use Fix missing initialisation of extack in flow offload.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00241 · Published 2024-09-11 · Fixed in 5.10.225, 5.15.166 +4 CWE-665
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: block: initialize integrity buffer to zero before writing it to media Metadata added by bio_integrity_prep is using plain kmalloc, which leads to random…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2024-08-17 · Partial fix · 4.19.322, 5.4.284 +6 CWE-401
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix illegal rmb_desc access in SMC-D connection dump A crash was found when dumping SMC-D connections.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00259 · Published 2024-02-29 · Partial fix · 4.19.307, 5.4.269 +6 CWE-476
THREATIST.IORead the docs