Red Hat Security Advisory

RHSA-2024:8161

kernel security update

Released 2024-10-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.126.1.el8_6, kernel-4.18.0-372.126.1.el8_6, kernel-abi-stablelists-4.18.0-372.126.1.el8_6 +14
Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.126.1.el8_6, kernel-4.18.0-372.126.1.el8_6, kernel-abi-stablelists-4.18.0-372.126.1.el8_6 +19
Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.126.1.el8_6, kernel-4.18.0-372.126.1.el8_6, kernel-abi-stablelists-4.18.0-372.126.1.el8_6 +14

Fixes 4 records

TI-2024-23747 CVE-2024-35884 · GHSA-fw47-mxv2-w4h2

udp: do not accept non-tunnel GSO skbs landing in a tunnel

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: udp: do not accept non-tunnel GSO skbs landing in a tunnel When rx-udp-gro-forwarding is enabled UDP packets might be GROed when being forwarded.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00686 Published 2024-05-19 Partial fix · 5.10.215, 5.15.154 +4 CWE-617

TI-2024-17483 CVE-2024-26598 · GHSA-xfvp-h462-p6q2

KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a potential UAF scenario in the case of an LPI translation cache hit racing…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0024 Published 2024-02-23 Partial fix · 5.4.269, 5.10.209 +5 CWE-416

TI-2024-17702 CVE-2024-26830 · GHSA-wvxq-2p8c-hj2m

i40e: Do not allow untrusted VF to remove administratively set MAC

LOW 36

In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Currently when PF administratively sets VF's MAC address and the VF is put down (VF t…

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00233 Published 2024-04-17 Partial fix · 6.1.79, 6.6.18 +2

TI-2021-22208 CVE-2021-47560

mlxsw: spectrum: Protect driver from buggy firmware

LOW 24

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Protect driver from buggy firmware When processing port up/down events generated by the device's firmware, the driver protects itself f…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00222 Published 2024-05-24 Partial fix · 5.10.83, 5.15.6 +1 CWE-476