Red Hat Security AdvisoryRHSA-2024:6745
kernel-rt security update
Released 2024-09-18 · Red Hat rating Moderate · View on Red Hat →
Fixes 12 records
Priority MEDIUM 41
In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from different places with va…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01003 · Published 2024-06-19 · Partial fix · 5.15.161, 6.1.93 +4 CWE-476
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00296 · Published 2024-07-12 · Partial fix · 4.19.317, 5.4.279 +6 CWE-476
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00245 · Published 2024-05-24 · Partial fix · 4.19.312, 5.4.274 +4
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER system's error recovery process, the kernel driver may encounter a race cond…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.002 · Published 2024-05-01 · Partial fix · 4.19.312, 5.4.274 +7 CWE-367
Priority LOW 29
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: af_bluetooth: Fix deadlock Attemting to do sock_lock on .recvmsg may cause a deadlock as shown bellow, so instead of using sock_sock this use…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00489 · Published 2024-04-17 · Partial fix · 5.15.209, 6.1.191 +5 CWE-416
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: skip to create PMD-sized page cache if needed On ARM64, HPAGE_PMD_ORDER is 13 when the base page size is 64KB.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00288 · Published 2024-07-29 · Partial fix · 6.1.191, 6.6.41 +2
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix task_struct reference leak During the execution of the following stress test with linux-rt: stress-ng --cyclic 30 --timeout 30 --min…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00357 · Published 2024-07-29 · Partial fix · 4.20, 5.5 +4 CWE-401
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket When using a BPF program on kernel_connect(), the call can return -EPERM.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00231 · Published 2024-08-07 · Partial fix · 4.19.322, 5.4.284 +6 CWE-835
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00211 · Published 2024-08-07 · Partial fix · 6.1.191, 6.6.41 +2
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: mm/shmem: disable PMD-sized page cache if needed For shmem files, it's possible that PMD-sized page cache can't be supported by xarray.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00211 · Published 2024-08-07 · Partial fix · 6.1.191, 6.6.41 +2 CWE-770
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit() callback is optional The exit() callback is optional and shouldn't be called without checking a valid pointer first.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00237 · Published 2024-06-19 · Partial fix · 5.4.278, 5.10.219 +6 CWE-476
Priority LOW 20
In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel buffer and copy count from userspace to that buffer.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00253 · Published 2024-06-19 · Fixed in 4.19.316, 5.4.278 +7 CWE-476