Red Hat Security Advisory

RHSA-2024:7489

kernel security update

Released 2024-10-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.2) kernel-tools-libs-devel-5.14.0-284.86.1.el9_2
Red Hat Enterprise Linux AppStream EUS (v.9.2) kernel-64k-debug-devel-5.14.0-284.86.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.86.1.el9_2, kernel-64k-devel-5.14.0-284.86.1.el9_2 +9
Red Hat Enterprise Linux BaseOS EUS (v.9.2) bpftool-7.0.0-284.86.1.el9_2, kernel-5.14.0-284.86.1.el9_2, kernel-64k-5.14.0-284.86.1.el9_2 +29

Fixes 4 records

TI-2024-25793 CVE-2024-38558 · GHSA-v5cj-xc9v-xg6m

net: openvswitch: fix overwriting ct original tuple for ICMPv6

MEDIUM 44

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVS_PACKET_CMD_EXECUTE has 3 main attributes: - OVS_PACKET_ATTR_KEY - Packet metadata in…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00822 Published 2024-06-19 Partial fix · 4.19.316, 5.4.278 +7 CWE-665

TI-2024-18250 CVE-2024-27415 · GHSA-934r-h8mp-qw4r

netfilter: bridge: confirm multicast packets before passing them up the stack

LOW 38

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nf_confirm logic cannot handle cloned skbs referencing the same…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00252 Published 2024-05-17 Partial fix · 5.15.151, 6.1.81 +3 CWE-362

TI-2024-24526 CVE-2024-36979 · GHSA-355p-v6gf-92vj

net: bridge: mst: fix vlan use-after-free

LOW 34

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in bridge's mst code.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00257 Published 2024-06-19 Partial fix · 6.1.93, 6.6.33 +3 CWE-416

TI-2024-24088 CVE-2024-36270 · GHSA-gwmf-748f-8j3c

netfilter: tproxy: bail out if IP has been disabled on the device

LOW 24

In the Linux kernel, the following vulnerability has been resolved: netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general protection fault, probably for non-canonical address 0xdffffc0…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00261 Published 2024-06-21 Partial fix · 5.4.278, 5.10.219 +5 CWE-476