Red Hat Security Advisory

RHSA-2024:10942

kernel:5.14.0 security update

Released 2024-12-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.48.1.el9_4, libperf-5.14.0-427.48.1.el9_4
Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.48.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.48.1.el9_4, kernel-64k-devel-5.14.0-427.48.1.el9_4 +10
Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.48.1.el9_4, kernel-5.14.0-427.48.1.el9_4, kernel-64k-5.14.0-427.48.1.el9_4 +29
Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.48.1.el9_4, kernel-rt-core-5.14.0-427.48.1.el9_4, kernel-rt-debug-5.14.0-427.48.1.el9_4 +9
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.48.1.el9_4, kernel-rt-core-5.14.0-427.48.1.el9_4, kernel-rt-debug-5.14.0-427.48.1.el9_4 +11

Fixes 7 records

TI-2024-33703 CVE-2024-50262 · GHSA-m4m9-v4mx-256j

bpf: Fix out-of-bounds write in trie_get_next_key()

LOW 36

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in trie_get_next_key() trie_get_next_key() allocates a node stack with size trie->max_prefixlen, while it writes (trie->max…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0027 Published 2024-11-09 Partial fix · 4.19.323, 5.4.285 +6 CWE-787

TI-2024-31953 CVE-2024-47675 · GHSA-8qrc-cg87-8g3w

bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()

LOW 34

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() If bpf_link_prime() fails, bpf_uprobe_multi_link_attach() goes to the error_free label and fre…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00239 Published 2024-10-21 Partial fix · 6.6.54, 6.10.13 +2 CWE-416

TI-2024-27425 CVE-2024-41064 · GHSA-5pj2-3h8g-rxfg

powerpc/eeh: avoid possible crash when edev->pdev changes

LOW 34

In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: avoid possible crash when edev->pdev changes If a PCI device is removed during eeh_pe_report_edev(), edev->pdev will change and can cause a…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00239 Published 2024-07-29 Partial fix · 5.4.281, 5.10.223 +5

TI-2024-27410 CVE-2024-41049 · GHSA-83vm-wg7j-77hw

filelock: fix potential use-after-free in posix_lock_inode

LOW 34

In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free in posix_lock_inode Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00281 Published 2024-07-29 Partial fix · 5.4.280, 5.10.222 +6 CWE-416

TI-2024-17925 CVE-2024-27062 · GHSA-j4gv-c6jh-pvhm

nouveau: lock the client object tree.

LOW 33

In the Linux kernel, the following vulnerability has been resolved: nouveau: lock the client object tree.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00181 Published 2024-05-01 Partial fix · 6.1.191, 6.6.24 +2 CWE-362

TI-2024-33339 CVE-2024-49888 · GHSA-c4vm-rj4p-m3c8

bpf: Fix a sdiv overflow issue

LOW 25

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a sdiv overflow issue Zac Ecob reported a problem where a bpf program may cause kernel crash due to the following error: Oops: divide error: 00…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00282 Published 2024-10-21 Partial fix · 6.6.160, 6.10.14 +2 CWE-190

TI-2024-28129 CVE-2024-42124 · GHSA-j3vc-53vj-555f

scsi: qedf: Make qedf_execute_tmf() non-preemptible

LOW 24

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Make qedf_execute_tmf() non-preemptible Stop calling smp_processor_id() from preemptible code in qedf_execute_tmf90.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00255 Published 2024-07-30 Partial fix · 5.4.280, 5.10.222 +5