Red Hat Security AdvisoryRHSA-2024:6997
kernel security update
Released 2024-09-24 · Red Hat rating Important · View on Red Hat →
Fixes 19 records
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00676 · Published 2024-06-19 · Partial fix · 6.1.191, 6.6.33 +3 CWE-416
Priority MEDIUM 41
In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from different places with va…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01003 · Published 2024-06-19 · Partial fix · 5.15.161, 6.1.93 +4 CWE-476
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to command failed to flush back to SCSI layer.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00371 · Published 2024-05-01 · Partial fix · 4.19.312, 5.4.274 +7 CWE-476
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoid potentially reusing uninitialized data
CVSS 3.1HIGH 8.3· Adjacent network · No auth · No interaction · EPSS 0.00526 · Published 2024-07-30 · Partial fix · 5.15.163, 6.1.98 +3 CWE-908
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: Avoid address calculations via out of bounds array indexing Before request->channels[] can be used, request->n_channels must be set.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00236 · Published 2024-06-19 · Partial fix · 6.6.33, 6.8.12 +2 CWE-129
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00296 · Published 2024-07-12 · Partial fix · 4.19.317, 5.4.279 +6 CWE-476
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() Assuming the following: - side A configures the n_gsm in basic option mode - side B sends the h…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00265 · Published 2024-05-29 · Partial fix · 4.19.316, 5.4.278 +7 CWE-125
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: fork: defer linking file vma until vma is fully initialized Thorvald reported a WARNING [1].
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2024-05-01 · Partial fix · 6.1.191, 6.6.134 +2 CWE-908
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map pointer Coverity scan reported potential risk of double free of the pointer ha->vp_map.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2024-05-01 · Partial fix · 6.6.24, 6.7.12 +2 CWE-415
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: don't override retval if we already lost the skb If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we n…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00278 · Published 2024-04-03 · Partial fix · 5.10.238, 5.15.182 +4 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: uio: Fix use-after-free in uio_open core-1 core-2 ------------------------------------------------------- uio_unregister_device uio_open idev = idr_find…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00299 · Published 2024-02-20 · Partial fix · 4.15, 4.19.306 +7 CWE-415
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-after-free issue occurs as follows: when the GPIO chip device file is being closed…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00178 · Published 2024-05-30 · Partial fix · 5.10.234, 5.15.177 +4 CWE-362
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket When using a BPF program on kernel_connect(), the call can return -EPERM.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00231 · Published 2024-08-07 · Partial fix · 4.19.322, 5.4.284 +6 CWE-835
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit() callback is optional The exit() callback is optional and shouldn't be called without checking a valid pointer first.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00237 · Published 2024-06-19 · Partial fix · 5.4.278, 5.10.219 +6 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using corpuses where a BPF tracing program deletes elements from a so…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00182 · Published 2024-05-19 · Partial fix · 5.4.274, 5.10.215 +5 CWE-667
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes Fix KVM_SET_MEMORY_ATTRIBUTES to not overflow lpage_info array and trigger KASAN s…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00229 · Published 2024-05-01 · Partial fix · 6.8.8, 6.9 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses Since commit a4d5613c4dc6 ("arm: extend pfn_valid to take into account freed…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0023 · Published 2024-05-01 · Partial fix · 5.5, 5.11 +5
Priority LOW 21
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix a race between readers and resize checks The reader code in rb_get_reader_page() swaps a new reader page into the ring buffer by doing…
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00175 · Published 2024-06-19 · Partial fix · 4.19.316, 5.4.278 +7 CWE-362
Priority LOW 20
In the Linux kernel, the following vulnerability has been resolved: Input: cyapa - add missing input core locking to suspend/resume functions Grab input->mutex during suspend/resume functions like it is done in other inp…
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00177 · Published 2024-06-21 · Partial fix · 5.15.161, 6.1.93 +3 CWE-667