Red Hat Security AdvisoryRHSA-2024:4554
kernel-rt security update
Released 2024-07-15 · Red Hat rating Important · View on Red Hat →
Fixes 15 records
Priority MEDIUM 52
In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() The if statement: if (port >= DSAF_GE_NUM) return;…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01358 · Published 2024-05-24 · Partial fix · 4.9.292, 4.14.257 +5 CWE-129
Priority MEDIUM 45
In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative reported a UAF in the tipc_buf_append() error path: BUG: KASAN…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01305 · Published 2024-05-30 · Partial fix · 4.19.314, 5.4.276 +6 CWE-416
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, the submitting thread (recvmsg/sendmsg) may exit as soon as the…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00591 · Published 2024-02-21 · Partial fix · 5.15.165, 6.1.84 +3 CWE-362
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread (one which called recvmsg/sendmsg) may exit as soon as the async crypto handle…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0055 · Published 2024-02-21 · Partial fix · 5.5, 5.7 +5 CWE-362
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Although ipv6_get_ifaddr walks inet6_addr_lst under the RCU lock, it still means hlis…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00375 · Published 2024-05-20 · Partial fix · 4.19.313, 5.4.275 +6 CWE-770
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free in hci_error_reset While handling the HCI_EV_HARDWARE_ERROR event, if the underlying BT controller is not resp…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00425 · Published 2024-04-04 · Partial fix · 4.19.309, 5.4.271 +6 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() syzbot found another use-after-free in ip6_route_mpath_notify() [1] Commit f7225172f25a ("net/i…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00269 · Published 2024-04-17 · Partial fix · 4.19.310, 5.4.272 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: icmp: prevent possible NULL dereferences from icmp_build_probe() First problem is a double call to __in_dev_get_rcu(), because the second one could retu…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00983 · Published 2024-05-17 · Partial fix · 5.15.158, 6.1.90 +3 CWE-476
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() Assuming the following: - side A configures the n_gsm in basic option mode - side B sends the h…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00265 · Published 2024-05-29 · Partial fix · 4.19.316, 5.4.278 +7 CWE-125
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg Currently, the hns3_remove function firstly uninstall client instance, and then uninstall acce…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00248 · Published 2024-06-19 · Partial fix · 5.10.88, 5.15.11 +1 CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregister_flowtable_type() within nf_flow_inet_module_exit() can concur…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00204 · Published 2024-05-19 · Partial fix · 4.19.312, 5.4.274 +6 CWE-362
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer A memory overlapping copy occurs when deleting a long line.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00278 · Published 2024-03-02 · Partial fix · 4.19.312, 5.4.274 +4 CWE-787
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: honor table dormant flag from netdev release event path Check for table dormant flag otherwise netdev release event path tries to…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00233 · Published 2024-05-20 · Partial fix · 5.10.216, 5.15.158 +4
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index With numa balancing on, when a numa system is running where a numa node doesn't hav…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00244 · Published 2024-04-04 · Partial fix · 6.1.140, 6.6.22 +2
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock The following 3 locks would race against each other, causing the deadlock situation…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00183 · Published 2024-04-03 · Partial fix · 5.15.149, 6.1.79 +3 CWE-667