Read the docs
Red Hat Security Advisory

RHSA-2024:5065

kernel security update

Released 2024-08-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 12 records

Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fast_rx ent…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00355 Published 2024-05-17 Partial fix · 4.19.312, 5.4.274 +9 CWE-416
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Discard command completions in internal error Fix use after free when FW completion arrives while device is in internal error state.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00261 Published 2024-06-19 Partial fix · 5.10.219, 5.12 +6 CWE-416
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key_del() can free resources of a key directly without following t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00242 Published 2024-05-01 Partial fix · 5.10.215, 5.15.154 +5 CWE-416
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 A call to listxattr() with a buffer size = 0 returns the actual size of the buffer needed fo…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00283 Published 2024-04-17 Partial fix · 5.10.214, 5.15.153 +5
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data re-injection from stale subflow When the MPTCP PM detects that a subflow is stale, all the packet scheduler must re-inject all the mptcp…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00651 Published 2024-04-17 Partial fix · 5.15.149, 6.1.79 +3
TI-2024-17520 CVE-2024-26640 · GHSA-6q28-45j9-263v

tcp: add sanity checks to rx zerocopy

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity checks to rx zerocopy TCP rx zerocopy intent is to map pages initially allocated from NIC drivers, not pages owned by a fs.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00242 Published 2024-03-18 Partial fix · 5.10.210, 5.15.149 +4
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: drm: Don't unref the same fb many times by mistake due to deadlock handling If we get a deadlock after the fb lookup in drm_mode_page_flip_ioctl() we pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0023 Published 2024-02-29 Partial fix · 4.19.307, 5.4.269 +6 CWE-667
TI-2024-17685 CVE-2024-26810 · GHSA-fpf4-cfch-367m

vfio/pci: Lock external INTx masking ops

Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx may race INTx configuration changes via ioctl.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00197 Published 2024-04-05 Partial fix · 5.4.274, 5.10.215 +6 CWE-362
Priority LOW 31

In the Linux kernel, the following vulnerability has been resolved: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs Fan speed minimum can be enforced from sysfs.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0025 Published 2024-05-21 Partial fix · 4.19.209, 5.4.151 +3 CWE-125
TI-2024-24266 CVE-2024-36489 · GHSA-692g-7998-j2vj

tls: fix missing memory barrier in tls_init

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: tls: fix missing memory barrier in tls_init In tls_init(), a write memory barrier is missing, and store-store reordering may cause NULL dereference in t…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00253 Published 2024-06-21 Partial fix · 5.10.219, 5.15.161 +4 CWE-476
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix missing hugetlb_lock for resv uncharge There is a recent report on UFFDIO_COPY over hugetlb: https://lore.kernel.org/all/000000000000ee0…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00225 Published 2024-05-20 Partial fix · 5.10, 6.1.91 +3 CWE-617
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound Raw packet from PF_PACKET socket ontop of an IPv6-backed ipvlan device will hit WARN_ON_ONCE(…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00265 Published 2024-06-21 Partial fix · 4.19.316, 5.4.278 +6