Read the docs
Red Hat Security Advisory

RHSA-2024:6992

kernel security update

Released 2024-09-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes iattr::ia_size is a loff_t, so these NFSv3 procedures must be careful to deal with incomin…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00653 Published 2024-07-16 Partial fix · 5.4.295, 5.10.220 +3
TI-2022-24352 CVE-2022-48828 · GHSA-j7gw-xcvp-f76q

NFSD: Fix ia_size underflow

Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix ia_size underflow iattr::ia_size is a loff_t, which is a signed 64-bit type.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00631 Published 2024-07-16 Partial fix · 5.4.295, 5.10.220 +3 CWE-191
Priority LOW 38

In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00256 Published 2024-07-29 Partial fix · 5.4.281, 5.10.223 +6 CWE-125
Priority LOW 38

In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path,…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00256 Published 2024-07-29 Partial fix · 5.4.281, 5.10.223 +6 CWE-125
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_cpuctx_list.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00242 Published 2024-07-16 Partial fix · 4.14.267, 4.19.230 +5