Read the docs
Red Hat Security Advisory

RHSA-2024:6998

kernel security update

Released 2024-09-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

TI-2022-24213 CVE-2022-48686 · GHSA-9wjv-frj6-hjv9

nvme-tcp: fix UAF when detecting digest errors

Priority MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the io_work loop when we set rd_enabled to true, so we don't attempt to read dat…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2024-05-03 Partial fix · 5.4.213, 5.10.143 +3 CWE-416
TI-2023-28865 CVE-2023-52522 · GHSA-f8jx-pmvg-jgfh

net: fix possible store tearing in neigh_periodic_work()

Priority LOW 38

In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neigh_periodic_work() While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00335 Published 2024-03-02 Partial fix · 5.4.258, 5.10.198 +4
TI-2024-24439 CVE-2024-36889

mptcp: ensure snd_nxt is properly initialized on connect

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_nxt is properly initialized on connect Christoph reported a splat hinting at a corrupted snd_una: WARNING: CPU: 1 PID: 38 at net/mptcp…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00267 Published 2024-05-30 Partial fix · 5.10.218, 5.15.159 +4
TI-2024-17565 CVE-2024-26686 · GHSA-mgx5-jrhq-g7rg

fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task_sighand() can trigger a hard lockup.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00213 Published 2024-04-03 Partial fix · 5.10.237, 5.15.181 +4 CWE-667
TI-2022-24170 CVE-2022-48638 · GHSA-ggqq-32pw-pm22

cgroup: cgroup_get_from_id() must check the looked-up kn is a directory

Priority LOW 23

In the Linux kernel, the following vulnerability has been resolved: cgroup: cgroup_get_from_id() must check the looked-up kn is a directory cgroup has to be one kernfs dir, otherwise kernel panic is caused, especially cg…

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00227 Published 2024-04-28 Partial fix · 5.15.72, 5.19.12 +1