Red Hat Security AdvisoryRHSA-2024:3306
kernel security and bug fix update
Released 2024-05-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-427.18.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.18.1.el9_4, kernel-64k-devel-5.14.0-427.18.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.3.0-427.18.1.el9_4, kernel-5.14.0-427.18.1.el9_4, kernel-64k-5.14.0-427.18.1.el9_4 +29
- Red Hat Enterprise Linux CRB (v. 9) kernel-tools-libs-devel-5.14.0-427.18.1.el9_4, libperf-5.14.0-427.18.1.el9_4
- Red Hat Enterprise Linux NFV (v. 9) kernel-rt-5.14.0-427.18.1.el9_4, kernel-rt-core-5.14.0-427.18.1.el9_4, kernel-rt-debug-5.14.0-427.18.1.el9_4 +11
- Red Hat Enterprise Linux RT (v. 9) kernel-rt-5.14.0-427.18.1.el9_4, kernel-rt-core-5.14.0-427.18.1.el9_4, kernel-rt-debug-5.14.0-427.18.1.el9_4 +9
Fixes 5 records
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in __skb_flow_dissect+0x19d1/0x7…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00247 · Published 2024-04-04 · Partial fix · 2.6.34, 5.4.271 +6 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: gro: fix ownership transfer If packets are GROed with fraglist they might be segmented later on and continue their journey in the stack.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00243 · Published 2024-05-19 · Partial fix · 5.15.154, 6.1.85 +3
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2024-03-21 · Partial fix · 4.19.312, 5.4.274 +6
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to co…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00204 · Published 2024-03-21 · Partial fix · 5.4.274, 5.10.215 +6 CWE-667
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - Disallow families other than NFPROTO_{IPV4,IPV6,INET}.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00237 · Published 2024-04-02 · Partial fix · 5.4.269, 5.10.210 +5
THREATIST.IORead the docs