Red Hat Security Advisory

RHSA-2024:3855

kernel security update

Released 2024-06-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.2) kernel-tools-libs-devel-5.14.0-284.69.1.el9_2
Red Hat Enterprise Linux AppStream EUS (v.9.2) kernel-64k-debug-devel-5.14.0-284.69.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.69.1.el9_2, kernel-64k-devel-5.14.0-284.69.1.el9_2 +9
Red Hat Enterprise Linux BaseOS EUS (v.9.2) bpftool-7.0.0-284.69.1.el9_2, kernel-5.14.0-284.69.1.el9_2, kernel-64k-5.14.0-284.69.1.el9_2 +29

Fixes 5 records

TI-2024-17483 CVE-2024-26598 · GHSA-xfvp-h462-p6q2

KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a potential UAF scenario in the case of an LPI translation cache hit racing…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0024 Published 2024-02-23 Partial fix · 5.4.269, 5.10.209 +5 CWE-416

TI-2023-29002 CVE-2023-52667 · GHSA-7xf4-2cch-q53v

net/mlx5e: fix a potential double-free in fs_any_create_groups

LOW 34

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a potential double-free in fs_any_create_groups When kcalloc() for ft->g succeeds but kvzalloc() for in fails, fs_any_create_groups() wil…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00269 Published 2024-05-17 Partial fix · 5.15.149, 6.1.76 +3 CWE-415

TI-2023-28407 CVE-2023-51779 · GHSA-w3hv-rwgr-crx3

bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a…

LOW 32

bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00258 Published 2023-12-25 Partial fix CWE-416

TI-2023-04684 CVE-2023-5090 · GHSA-f67c-8m2w-79hm

Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs

LOW 26

A flaw was found in KVM.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00261 Published 2023-11-06 Partial fix · 4.18.0-553.8.1.rt7.349.el8_10, 4.18.0-553.8.1.el8_10 +3 CWE-755

TI-2023-28977 CVE-2023-52639 · GHSA-82mq-c3x3-cpp9

KVM: s390: vsie: fix race during shadow creation

LOW 21

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: fix race during shadow creation Right now it is possible to see gmap->private being zero in kvm_s390_vsie_gmap_notifier resulting in a…

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00175 Published 2024-04-03 Partial fix · 6.1.82, 6.6.22 +2 CWE-362