Red Hat Security AdvisoryRHSA-2024:5858
kpatch-patch-5_14_0-70_85_1 security update
Released 2024-08-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) kpatch-patch-5_14_0-70_85_1-1-4.el9_0
Fixes 4 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02701 · Published 2024-06-10 · Partial fix · 4.19.316, 5.4.278 +6 CWE-416
Priority MEDIUM 45
In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative reported a UAF in the tipc_buf_append() error path: BUG: KASAN…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01305 · Published 2024-05-30 · Partial fix · 4.19.314, 5.4.276 +6 CWE-416
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00256 · Published 2024-07-29 · Partial fix · 5.4.281, 5.10.223 +6 CWE-125
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path,…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00256 · Published 2024-07-29 · Partial fix · 5.4.281, 5.10.223 +6 CWE-125