Red Hat Security Advisory

RHSA-2024:2621

kernel security, bug fix, and enhancement update

Released 2024-04-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.8.8) kernel-tools-libs-devel-4.18.0-477.55.1.el8_8
Red Hat Enterprise Linux BaseOS EUS (v.8.8) bpftool-4.18.0-477.55.1.el8_8, kernel-4.18.0-477.55.1.el8_8, kernel-abi-stablelists-4.18.0-477.55.1.el8_8 +19

Fixes 7 records

TI-2024-16940 CVE-2024-25744 · GHSA-ffqq-vj92-hpx8

In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at…

MEDIUM 40

In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00278 Published 2024-02-12 Partial fix CWE-693

TI-2022-03349 CVE-2022-3640 · GHSA-hx6h-vxvg-2g6w

Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free

MEDIUM 40

A vulnerability, which was classified as critical, was found in Linux Kernel.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01205 Published 2022-10-21 Fixed CWE-119

TI-2021-13005 CVE-2021-33631 · GHSA-ff22-5jp8-224r

Kernel crash in EXT4 filesystem

LOW 34

Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 b…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00371 Published 2024-01-18 Partial fix CWE-190

TI-2023-05998 CVE-2023-6546 · GHSA-v727-f437-6cxx

Kernel: gsm multiplexing race condition leads to privilege escalation

LOW 32

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00735 Published 2023-12-21 Partial fix · 4.18.0-513.24.1.rt7.326.el8_9, 4.18.0-513.24.1.el8_9 +28 CWE-366

TI-2022-20891 CVE-2022-42895 · GHSA-48h7-cvhw-3w6x

Info Leak in l2cap_core in the Linux Kernel

LOW 29

There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00482 Published 2022-11-23 Partial fix CWE-824

TI-2022-25605 CVE-2022-50116 · GHSA-gf27-p5cc-4mq4

tty: n_gsm: fix deadlock and link starvation in outgoing data path

LOW 24

In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix deadlock and link starvation in outgoing data path The current implementation queues up new control and user packets as needed and proce…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00149 Published 2025-06-18 Partial fix · 5.15.209, 5.18.18 +2 CWE-667

TI-2022-25435 CVE-2022-49940 · GHSA-52j6-g7fj-mfjm

tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()

LOW 24

In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() A null pointer dereference can happen when attempting to access the "gsm->receive()"…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00231 Published 2025-06-18 Fixed in 5.19, 5.15.66 +1 CWE-476