Read the docs
Red Hat Security Advisory

RHSA-2024:2008

kernel-rt security update

Released 2024-04-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2023-03563 CVE-2023-3812 · GHSA-v4mv-7g6h-5vh8

Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

Priority LOW 36

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00344 Published 2023-07-24 Partial fix · 4.18.0-513.9.1.rt7.311.el8_9, 4.18.0-513.9.1.el8_9 +12 CWE-787
TI-2024-17471 CVE-2024-26586 · GHSA-8pq4-pmqh-grvh

mlxsw: spectrum_acl_tcam: Fix stack corruption

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00247 Published 2024-02-22 Partial fix · 5.10.209, 5.15.148 +4 CWE-787
TI-2023-01127 CVE-2023-1192 · GHSA-r277-j8m2-3x97

Use-after-free in smb2_is_status_io_timeout()

Priority LOW 31

A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01104 Published 2023-11-01 Partial fix CWE-416
TI-2024-17487 CVE-2024-26602 · GHSA-5pjp-x72x-j9r3

sched/membarrier: reduce the ability to hammer on sys_membarrier

Priority LOW 25

In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on sys_membarrier On some systems, sys_membarrier can be very expensive, causing overall slowdowns for ev…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00318 Published 2024-02-24 Partial fix · 4.19.307, 5.4.269 +6
TI-2023-06578 CVE-2023-7192 · GHSA-mmc5-hgpc-m8q5

Kernel: refcount leak in ctnetlink_create_conntrack()

Priority LOW 25

A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00298 Published 2024-01-02 Partial fix · 4.18.0-193.133.1.el8_2, 4.18.0-193.133.1.rt13.184.el8_2 +8 CWE-401
TI-2023-04117 CVE-2023-4459 · GHSA-p788-v6c7-5vqg

Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

Priority LOW 24

A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00249 Published 2023-08-21 Partial fix · 4.18.0-193.133.1.el8_2, 4.18.0-193.133.1.rt13.184.el8_2 +5 CWE-476
TI-2021-21582 CVE-2021-46915 · GHSA-99vg-6g53-53wq

netfilter: nft_limit: avoid possible divide error in nft_limit_init

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: avoid possible divide error in nft_limit_init div_u64() divides u64 by u32.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00241 Published 2024-02-27 Partial fix · 4.14.232, 4.19.189 +4 CWE-369