Red Hat Security AdvisoryRHSA-2024:5065
kernel security update
Released 2024-08-07 · Red Hat rating Moderate · View on Red Hat →
Fixes 12 records
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fast_rx ent…
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00355 · Published 2024-05-17 · Partial fix · 4.19.312, 5.4.274 +9 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Discard command completions in internal error Fix use after free when FW completion arrives while device is in internal error state.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00261 · Published 2024-06-19 · Partial fix · 5.10.219, 5.12 +6 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key_del() can free resources of a key directly without following t…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00242 · Published 2024-05-01 · Partial fix · 5.10.215, 5.15.154 +5 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 A call to listxattr() with a buffer size = 0 returns the actual size of the buffer needed fo…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00283 · Published 2024-04-17 · Partial fix · 5.10.214, 5.15.153 +5
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data re-injection from stale subflow When the MPTCP PM detects that a subflow is stale, all the packet scheduler must re-inject all the mptcp…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00651 · Published 2024-04-17 · Partial fix · 5.15.149, 6.1.79 +3
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity checks to rx zerocopy TCP rx zerocopy intent is to map pages initially allocated from NIC drivers, not pages owned by a fs.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00242 · Published 2024-03-18 · Partial fix · 5.10.210, 5.15.149 +4
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: drm: Don't unref the same fb many times by mistake due to deadlock handling If we get a deadlock after the fb lookup in drm_mode_page_flip_ioctl() we pr…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0023 · Published 2024-02-29 · Partial fix · 4.19.307, 5.4.269 +6 CWE-667
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx may race INTx configuration changes via ioctl.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00197 · Published 2024-04-05 · Partial fix · 5.4.274, 5.10.215 +6 CWE-362
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs Fan speed minimum can be enforced from sysfs.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0025 · Published 2024-05-21 · Partial fix · 4.19.209, 5.4.151 +3 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: tls: fix missing memory barrier in tls_init In tls_init(), a write memory barrier is missing, and store-store reordering may cause NULL dereference in t…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00253 · Published 2024-06-21 · Partial fix · 5.10.219, 5.15.161 +4 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix missing hugetlb_lock for resv uncharge There is a recent report on UFFDIO_COPY over hugetlb: https://lore.kernel.org/all/000000000000ee0…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2024-05-20 · Partial fix · 5.10, 6.1.91 +3 CWE-617
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound Raw packet from PF_PACKET socket ontop of an IPv6-backed ipvlan device will hit WARN_ON_ONCE(…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00265 · Published 2024-06-21 · Partial fix · 4.19.316, 5.4.278 +6