Read the docs
Red Hat Security Advisory

RHSA-2024:4554

kernel-rt security update

Released 2024-07-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 15 records

Priority MEDIUM 52

In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() The if statement: if (port >= DSAF_GE_NUM) return;…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01358 Published 2024-05-24 Partial fix · 4.9.292, 4.14.257 +5 CWE-129
Priority MEDIUM 45

In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative reported a UAF in the tipc_buf_append() error path: BUG: KASAN…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01305 Published 2024-05-30 Partial fix · 4.19.314, 5.4.276 +6 CWE-416
Priority MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, the submitting thread (recvmsg/sendmsg) may exit as soon as the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00591 Published 2024-02-21 Partial fix · 5.15.165, 6.1.84 +3 CWE-362
Priority MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread (one which called recvmsg/sendmsg) may exit as soon as the async crypto handle…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0055 Published 2024-02-21 Partial fix · 5.5, 5.7 +5 CWE-362
Priority LOW 38

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Although ipv6_get_ifaddr walks inet6_addr_lst under the RCU lock, it still means hlis…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00375 Published 2024-05-20 Partial fix · 4.19.313, 5.4.275 +6 CWE-770
Priority LOW 38

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free in hci_error_reset While handling the HCI_EV_HARDWARE_ERROR event, if the underlying BT controller is not resp…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00425 Published 2024-04-04 Partial fix · 4.19.309, 5.4.271 +6 CWE-416
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() syzbot found another use-after-free in ip6_route_mpath_notify() [1] Commit f7225172f25a ("net/i…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00269 Published 2024-04-17 Partial fix · 4.19.310, 5.4.272 +6 CWE-416
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: icmp: prevent possible NULL dereferences from icmp_build_probe() First problem is a double call to __in_dev_get_rcu(), because the second one could retu…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00983 Published 2024-05-17 Partial fix · 5.15.158, 6.1.90 +3 CWE-476
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() Assuming the following: - side A configures the n_gsm in basic option mode - side B sends the h…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00265 Published 2024-05-29 Partial fix · 4.19.316, 5.4.278 +7 CWE-125
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg Currently, the hns3_remove function firstly uninstall client instance, and then uninstall acce…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00248 Published 2024-06-19 Partial fix · 5.10.88, 5.15.11 +1 CWE-416
Priority LOW 30

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregister_flowtable_type() within nf_flow_inet_module_exit() can concur…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00204 Published 2024-05-19 Partial fix · 4.19.312, 5.4.274 +6 CWE-362
Priority LOW 25

In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer A memory overlapping copy occurs when deleting a long line.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00278 Published 2024-03-02 Partial fix · 4.19.312, 5.4.274 +4 CWE-787
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: honor table dormant flag from netdev release event path Check for table dormant flag otherwise netdev release event path tries to…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00233 Published 2024-05-20 Partial fix · 5.10.216, 5.15.158 +4
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index With numa balancing on, when a numa system is running where a numa node doesn't hav…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00244 Published 2024-04-04 Partial fix · 6.1.140, 6.6.22 +2
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock The following 3 locks would race against each other, causing the deadlock situation…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00183 Published 2024-04-03 Partial fix · 5.15.149, 6.1.79 +3 CWE-667