Read the docs
Red Hat Security Advisory

RHSA-2024:6997

kernel security update

Released 2024-09-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 19 records

Priority MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00676 Published 2024-06-19 Partial fix · 6.1.191, 6.6.33 +3 CWE-416
Priority MEDIUM 41

In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from different places with va…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01003 Published 2024-06-19 Partial fix · 5.15.161, 6.1.93 +4 CWE-476
Priority LOW 38

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to command failed to flush back to SCSI layer.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00371 Published 2024-05-01 Partial fix · 4.19.312, 5.4.274 +7 CWE-476
Priority LOW 37

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoid potentially reusing uninitialized data

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00526 Published 2024-07-30 Partial fix · 5.15.163, 6.1.98 +3 CWE-908
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: Avoid address calculations via out of bounds array indexing Before request->channels[] can be used, request->n_channels must be set.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00236 Published 2024-06-19 Partial fix · 6.6.33, 6.8.12 +2 CWE-129
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() Assuming the following: - side A configures the n_gsm in basic option mode - side B sends the h…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00265 Published 2024-05-29 Partial fix · 4.19.316, 5.4.278 +7 CWE-125
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: fork: defer linking file vma until vma is fully initialized Thorvald reported a WARNING [1].

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00273 Published 2024-05-01 Partial fix · 6.1.191, 6.6.134 +2 CWE-908
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map pointer Coverity scan reported potential risk of double free of the pointer ha->vp_map.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00234 Published 2024-05-01 Partial fix · 6.6.24, 6.7.12 +2 CWE-415
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: don't override retval if we already lost the skb If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we n…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00278 Published 2024-04-03 Partial fix · 5.10.238, 5.15.182 +4 CWE-416
TI-2023-28786 CVE-2023-52439 · GHSA-7gq6-cq6r-rrpx

uio: Fix use-after-free in uio_open

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: uio: Fix use-after-free in uio_open core-1 core-2 ------------------------------------------------------- uio_unregister_device uio_open idev = idr_find…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00299 Published 2024-02-20 Partial fix · 4.15, 4.19.306 +7 CWE-415
Priority LOW 30

In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-after-free issue occurs as follows: when the GPIO chip device file is being closed…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00178 Published 2024-05-30 Partial fix · 5.10.234, 5.15.177 +4 CWE-362
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket When using a BPF program on kernel_connect(), the call can return -EPERM.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00231 Published 2024-08-07 Partial fix · 4.19.322, 5.4.284 +6 CWE-835
TI-2024-25850 CVE-2024-38615 · GHSA-54w4-35xc-2796

cpufreq: exit() callback is optional

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit() callback is optional The exit() callback is optional and shouldn't be called without checking a valid pointer first.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00237 Published 2024-06-19 Partial fix · 5.4.278, 5.10.219 +6 CWE-476
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using corpuses where a BPF tracing program deletes elements from a so…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00182 Published 2024-05-19 Partial fix · 5.4.274, 5.10.215 +5 CWE-667
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes Fix KVM_SET_MEMORY_ATTRIBUTES to not overflow lpage_info array and trigger KASAN s…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00229 Published 2024-05-01 Partial fix · 6.8.8, 6.9 CWE-125
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses Since commit a4d5613c4dc6 ("arm: extend pfn_valid to take into account freed…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0023 Published 2024-05-01 Partial fix · 5.5, 5.11 +5
Priority LOW 21

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix a race between readers and resize checks The reader code in rb_get_reader_page() swaps a new reader page into the ring buffer by doing…

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00175 Published 2024-06-19 Partial fix · 4.19.316, 5.4.278 +7 CWE-362
Priority LOW 20

In the Linux kernel, the following vulnerability has been resolved: Input: cyapa - add missing input core locking to suspend/resume functions Grab input->mutex during suspend/resume functions like it is done in other inp…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00177 Published 2024-06-21 Partial fix · 5.15.161, 6.1.93 +3 CWE-667