Red Hat Security AdvisoryRHSA-2024:4349
kernel security and bug fix update
Released 2024-07-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-427.24.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.24.1.el9_4, kernel-64k-devel-5.14.0-427.24.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.3.0-427.24.1.el9_4, kernel-5.14.0-427.24.1.el9_4, kernel-64k-5.14.0-427.24.1.el9_4 +29
- Red Hat Enterprise Linux CRB (v. 9) kernel-tools-libs-devel-5.14.0-427.24.1.el9_4, libperf-5.14.0-427.24.1.el9_4
- Red Hat Enterprise Linux NFV (v. 9) kernel-rt-5.14.0-427.24.1.el9_4, kernel-rt-core-5.14.0-427.24.1.el9_4, kernel-rt-debug-5.14.0-427.24.1.el9_4 +11
- Red Hat Enterprise Linux RT (v. 9) kernel-rt-5.14.0-427.24.1.el9_4, kernel-rt-core-5.14.0-427.24.1.el9_4, kernel-rt-debug-5.14.0-427.24.1.el9_4 +9
Fixes 8 records
Priority MEDIUM 48
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new fs rules into the tree Previously, add_rule_fg would only add newly created rules from the handle into the tree when they ha…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01413 · Published 2024-05-20 · Partial fix · 4.19.313, 5.4.275 +6 CWE-476
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2_reconnect_server() The UAF bug is due to smb2_reconnect_server() accessing a session that is already being teared down by a…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00618 · Published 2024-05-19 · Partial fix · 6.1.121, 6.6.29 +2 CWE-416
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free in hci_error_reset While handling the HCI_EV_HARDWARE_ERROR event, if the underlying BT controller is not resp…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00425 · Published 2024-04-04 · Partial fix · 4.19.309, 5.4.271 +6 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Add missing skb_mark_for_recycle Notice that skb_mark_for_recycle() is introduced later than fixes tag in commit 6a5bcd84e886 ("page_pool:…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00772 · Published 2024-05-09 · Partial fix · 5.15.154, 6.1.85 +3 CWE-401
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a potential double-free in fs_any_create_groups When kcalloc() for ft->g succeeds but kvzalloc() for in fails, fs_any_create_groups() wil…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00269 · Published 2024-05-17 · Partial fix · 5.15.149, 6.1.76 +3 CWE-415
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: net: hns3: do not allow call hns3_nic_net_open repeatedly hns3_nic_net_open() is not allowed to called repeatly, but there is no checking for this.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00256 · Published 2024-05-21 · Partial fix · 5.4.151, 5.10.71 +2
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER system's error recovery process, the kernel driver may encounter a race cond…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.002 · Published 2024-05-01 · Partial fix · 4.19.312, 5.4.274 +7 CWE-367
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context Indirection (*) is of lower precedence than postfix increment (++).
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00237 · Published 2024-03-26 · Partial fix · 6.6.15, 6.6 +2 CWE-125
THREATIST.IORead the docs