Red Hat Security AdvisoryRHSA-2024:2758
kernel security and bug fix update
Released 2024-05-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-427.16.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.16.1.el9_4, kernel-64k-devel-5.14.0-427.16.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.3.0-427.16.1.el9_4, kernel-5.14.0-427.16.1.el9_4, kernel-64k-5.14.0-427.16.1.el9_4 +29
- Red Hat Enterprise Linux CRB (v. 9) kernel-tools-libs-devel-5.14.0-427.16.1.el9_4, libperf-5.14.0-427.16.1.el9_4
- Red Hat Enterprise Linux NFV (v. 9) kernel-rt-5.14.0-427.16.1.el9_4, kernel-rt-core-5.14.0-427.16.1.el9_4, kernel-rt-debug-5.14.0-427.16.1.el9_4 +11
- Red Hat Enterprise Linux RT (v. 9) kernel-rt-5.14.0-427.16.1.el9_4, kernel-rt-core-5.14.0-427.16.1.el9_4, kernel-rt-debug-5.14.0-427.16.1.el9_4 +9
Fixes 4 records
Priority MEDIUM 62
A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00969 · Published 2024-02-04 · Partial fix · 4.18.0-553.5.1.rt7.346.el8_10, 4.18.0-553.5.1.el8_10 +5 CWE-203
Priority LOW 33
In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler in userspace applications.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00247 · Published 2024-05-15 · Partial fix CWE-20
Priority LOW 28
In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.0018 · Published 2024-05-17 · Partial fix CWE-828
Priority LOW 26
A flaw was found in KVM.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00261 · Published 2023-11-06 · Partial fix · 4.18.0-553.8.1.rt7.349.el8_10, 4.18.0-553.8.1.el8_10 +3 CWE-755
THREATIST.IORead the docs