Red Hat Security AdvisoryRHSA-2024:1877
kernel security and bug fix update
Released 2024-04-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.8.6) kernel-tools-libs-devel-4.18.0-372.100.1.el8_6
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) bpftool-4.18.0-372.100.1.el8_6, kernel-4.18.0-372.100.1.el8_6, kernel-abi-stablelists-4.18.0-372.100.1.el8_6 +19
- Red Hat Virtualization 4 Hypervisor for RHEL 8 kernel-devel-4.18.0-372.100.1.el8_6, perf-4.18.0-372.100.1.el8_6
Fixes 6 records
Priority MEDIUM 40
A vulnerability, which was classified as critical, was found in Linux Kernel.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01205 · Published 2022-10-21 · Fixed CWE-119
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00228 · Published 2024-03-04 · Partial fix · 5.15.12, 5.16
Priority LOW 29
There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00482 · Published 2022-11-23 · Partial fix CWE-824
Priority LOW 29
Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00319 · Published 2022-03-11 · Partial fix · Processor Zen 3 CWE-212
Priority LOW 25
A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00332 · Published 2022-06-30 · Fixed CWE-476
Priority LOW 25
A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00293 · Published 2022-08-29 · Fixed CWE-416