Red Hat Security Advisory

RHSA-2024:6156

kernel security update

Released 2024-09-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.139.1.el8_4, kernel-4.18.0-305.139.1.el8_4, kernel-abi-stablelists-4.18.0-305.139.1.el8_4 +14
Red Hat Enterprise Linux BaseOS E4S (v.8.4) bpftool-4.18.0-305.139.1.el8_4, kernel-4.18.0-305.139.1.el8_4, kernel-abi-stablelists-4.18.0-305.139.1.el8_4 +14
Red Hat Enterprise Linux BaseOS TUS (v.8.4) bpftool-4.18.0-305.139.1.el8_4, kernel-4.18.0-305.139.1.el8_4, kernel-abi-stablelists-4.18.0-305.139.1.el8_4 +14

Fixes 4 records

TI-2024-27451 CVE-2024-41091 · GHSA-x5q2-qqwh-x9rv

tun: add missing verification for short frame

LOW 38

In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00256 Published 2024-07-29 Partial fix · 5.4.281, 5.10.223 +6 CWE-125

TI-2024-27450 CVE-2024-41090 · GHSA-22mj-9hjg-cp82

tap: add missing verification for short frame

LOW 38

In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path,…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00256 Published 2024-07-29 Partial fix · 5.4.281, 5.10.223 +6 CWE-125

TI-2024-27357 CVE-2024-40995 · GHSA-3f2p-5jcv-cffx

net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()

LOW 25

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() syzbot found hanging tasks waiting on rtnl_lock [1] A reproducer is available in…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00286 Published 2024-07-12 Partial fix · 5.4.279, 5.10.221 +5 CWE-835

TI-2022-24323 CVE-2022-48799 · GHSA-rw3h-fgc9-wwjm

perf: Fix list corruption in perf_cgroup_switch()

LOW 24

In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_cpuctx_list.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00242 Published 2024-07-16 Partial fix · 4.14.267, 4.19.230 +5