Red Hat Security Advisory

RHSA-2024:11313

kernel security update

Released 2024-12-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.49.1.el9_4, libperf-5.14.0-427.49.1.el9_4
Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.49.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.49.1.el9_4, kernel-64k-devel-5.14.0-427.49.1.el9_4 +11
Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.49.1.el9_4, kernel-5.14.0-427.49.1.el9_4, kernel-64k-5.14.0-427.49.1.el9_4 +29
Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.49.1.el9_4, kernel-rt-core-5.14.0-427.49.1.el9_4, kernel-rt-debug-5.14.0-427.49.1.el9_4 +9
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.49.1.el9_4, kernel-rt-core-5.14.0-427.49.1.el9_4, kernel-rt-debug-5.14.0-427.49.1.el9_4 +11

Fixes 4 records

TI-2024-27351 CVE-2024-40989 · GHSA-x78r-6w48-6g3q

KVM: arm64: Disassociate vcpus from redistributor region on teardown

LOW 34

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Disassociate vcpus from redistributor region on teardown When tearing down a redistributor region, make sure we don't have any dangling poin…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00299 Published 2024-07-12 Partial fix · 6.1.96, 6.6.36 +2 CWE-416

TI-2024-25862 CVE-2024-38627 · GHSA-84x6-2366-7jjm

stm class: Fix a double free in stm_register_device()

LOW 34

In the Linux kernel, the following vulnerability has been resolved: stm class: Fix a double free in stm_register_device() The put_device(&stm->dev) call will trigger stm_device_release() which frees "stm" so the vfree(st…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00251 Published 2024-06-21 Partial fix · 4.5, 4.19.316 +7 CWE-415

TI-2024-26434 CVE-2024-39499 · GHSA-pq55-ghfc-4495

vmci: prevent speculation leaks by sanitizing event in event_deliver()

LOW 31

In the Linux kernel, the following vulnerability has been resolved: vmci: prevent speculation leaks by sanitizing event in event_deliver() Coverity spotted that event_msg is controlled by user-space, event_msg->event_dat…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00296 Published 2024-07-12 Partial fix · 4.19.317, 5.4.279 +6 CWE-668

TI-2021-22040 CVE-2021-47384 · GHSA-h6gr-4677-26p9

hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field

LOW 26

In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field If driver read tmp value sufficient for (tmp & 0x08) && (!(tmp & 0x…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01028 Published 2024-05-21 Partial fix · 5.4.151, 5.10.71 +2 CWE-476