Priority MEDIUM 58
The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp.
RHSA-2024:3810
kernel security and bug fix update
Released 2024-06-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.8.8) kernel-tools-libs-devel-4.18.0-477.58.1.el8_8
- Red Hat Enterprise Linux BaseOS EUS (v.8.8) bpftool-4.18.0-477.58.1.el8_8, kernel-4.18.0-477.58.1.el8_8, kernel-abi-stablelists-4.18.0-477.58.1.el8_8 +19
Fixes 13 records
TI-2022-26174 CVE-2022-50717 · GHSA-87xx-4gg4-q2mp
nvmet-tcp: add bounds check on Transfer Tag
Priority MEDIUM 44
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds check on Transfer Tag ttag is used as an index to get cmd in nvmet_tcp_handle_h2c_data_pdu(), add a bounds check to avoid out-of-b…
TI-2021-21678 CVE-2021-47013 · GHSA-3ch6-f277-559q
net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..).
TI-2023-05991 CVE-2023-6536 · GHSA-xw3g-x45j-xxhh
Kernel: null pointer dereference in __nvmet_req_complete
Priority LOW 36
A flaw was found in the Linux kernel's NVMe driver.
TI-2023-05990 CVE-2023-6535 · GHSA-v8xr-j3gp-fmxj
Kernel: null pointer dereference in nvmet_tcp_execute_request
Priority LOW 36
A flaw was found in the Linux kernel's NVMe driver.
TI-2023-05835 CVE-2023-6356 · GHSA-98fx-x879-qp6f
Kernel: null pointer dereference in nvmet_tcp_build_iovec
Priority LOW 36
A flaw was found in the Linux kernel's NVMe driver.
TI-2023-01058 CVE-2023-1118 · GHSA-frcw-7v9f-qh6g
Use after free in Kernel
Priority LOW 36
A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device.
TI-2024-17522 CVE-2024-26642 · GHSA-79wp-fmwh-x929
netfilter: nf_tables: disallow anonymous set with timeout flag
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this.
TI-2024-17471 CVE-2024-26586 · GHSA-8pq4-pmqh-grvh
mlxsw: spectrum_acl_tcam: Fix stack corruption
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group…
TI-2024-16939 CVE-2024-25743 · GHSA-m82c-2r7m-qgcj
In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0…
Priority LOW 33
In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler in userspace applications.
TI-2023-28920 CVE-2023-52578 · GHSA-3jh7-wc4v-w78v
net: bridge: use DEV_STATS_INC()
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_finish() [1] This function can run from multiple cpus without mutua…
TI-2024-16938 CVE-2024-25742
In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29…
Priority LOW 28
In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler.
TI-2024-17487 CVE-2024-26602 · GHSA-5pjp-x72x-j9r3
sched/membarrier: reduce the ability to hammer on sys_membarrier
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on sys_membarrier On some systems, sys_membarrier can be very expensive, causing overall slowdowns for ev…