Red Hat Security Advisory

RHSA-2024:3462

kernel security and bug fix update

Released 2024-05-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.8.6) kernel-tools-libs-devel-4.18.0-372.105.1.el8_6
Red Hat Enterprise Linux BaseOS EUS (v.8.6) bpftool-4.18.0-372.105.1.el8_6, kernel-4.18.0-372.105.1.el8_6, kernel-abi-stablelists-4.18.0-372.105.1.el8_6 +19
Red Hat Virtualization 4 Hypervisor for RHEL 8 kernel-devel-4.18.0-372.105.1.el8_6, perf-4.18.0-372.105.1.el8_6

Fixes 3 records

TI-2021-21678 CVE-2021-47013 · GHSA-3ch6-f277-559q

net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0079 Published 2024-02-28 Partial fix · 4.9.269, 4.14.233 +6 CWE-416

TI-2023-28920 CVE-2023-52578 · GHSA-3jh7-wc4v-w78v

net: bridge: use DEV_STATS_INC()

LOW 30

In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_finish() [1] This function can run from multiple cpus without mutua…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0019 Published 2024-03-02 Partial fix · 4.19.296, 5.4.258 +5 CWE-362

TI-2023-02814 CVE-2023-3006 · GHSA-px79-jx9m-m5h5

A known cache speculation vulnerability, known as Branch History Injection (BHI) or…

LOW 24

A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00264 Published 2023-05-31 Partial fix CWE-226