Red Hat Security Advisory

RHSA-2024:5266

kernel security update

Released 2024-08-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.138.1.el8_4, kernel-4.18.0-305.138.1.el8_4, kernel-abi-stablelists-4.18.0-305.138.1.el8_4 +14
Red Hat Enterprise Linux BaseOS E4S (v.8.4) bpftool-4.18.0-305.138.1.el8_4, kernel-4.18.0-305.138.1.el8_4, kernel-abi-stablelists-4.18.0-305.138.1.el8_4 +14
Red Hat Enterprise Linux BaseOS TUS (v.8.4) bpftool-4.18.0-305.138.1.el8_4, kernel-4.18.0-305.138.1.el8_4, kernel-abi-stablelists-4.18.0-305.138.1.el8_4 +14

Fixes 6 records

TI-2024-24518 CVE-2024-36971 · GHSA-3rf3-8wmx-cm8q

net: fix __dst_negative_advice() race

CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02701 Published 2024-06-10 Partial fix · 4.19.316, 5.4.278 +6 CWE-416

TI-2022-24353 CVE-2022-48829 · GHSA-2294-53w4-gch9

NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes iattr::ia_size is a loff_t, so these NFSv3 procedures must be careful to deal with incomin…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00653 Published 2024-07-16 Partial fix · 5.4.295, 5.10.220 +3

TI-2022-24352 CVE-2022-48828 · GHSA-j7gw-xcvp-f76q

NFSD: Fix ia_size underflow

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix ia_size underflow iattr::ia_size is a loff_t, which is a signed 64-bit type.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00631 Published 2024-07-16 Partial fix · 5.4.295, 5.10.220 +3 CWE-191

TI-2024-26436 CVE-2024-39502 · GHSA-28h9-44vg-f29v

ionic: fix use after netif_napi_del()

LOW 34

In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues are started, netif_napi_add() and napi_enable() are called.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00307 Published 2024-07-12 Partial fix · 5.4.279, 5.10.221 +5 CWE-416

TI-2022-24351 CVE-2022-48827 · GHSA-g43c-r7c6-fhrv

NFSD: Fix the behavior of READ near OFFSET_MAX

LOW 34

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSET_MAX Dan Aloni reports: > Due to commit 8cfb9015280d ("NFS: Always provide aligned buffers to > the RPC read l…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00623 Published 2024-07-16 Partial fix · 5.10.220, 5.15.24 +2 CWE-125

TI-2024-23863 CVE-2024-36005 · GHSA-74r2-q9hq-437j

netfilter: nf_tables: honor table dormant flag from netdev release event path

LOW 24

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: honor table dormant flag from netdev release event path Check for table dormant flag otherwise netdev release event path tries to…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00233 Published 2024-05-20 Partial fix · 5.10.216, 5.15.158 +4