Red Hat Security AdvisoryRHSA-2024:8162
kernel security update
Released 2024-10-16 · Red Hat rating Moderate · View on Red Hat →
Fixes 14 records
Priority MEDIUM 41
In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00922 · Published 2024-08-17 · Partial fix · 4.19.320, 5.4.282 +6 CWE-754
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned to qopt->bands to execute subsequent code logic after kmalloc.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00281 · Published 2024-06-19 · Partial fix · 5.4.279, 5.10.221 +5 CWE-787
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increased lookup key size from 2 bytes to 16 bytes, because zones_ht_key got a…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00241 · Published 2024-08-17 · Partial fix · 5.10.224, 5.15.165 +5 CWE-908
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues are started, netif_napi_add() and napi_enable() are called.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00307 · Published 2024-07-12 · Partial fix · 5.4.279, 5.10.221 +5 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Add a timeout to acquire the command queue semaphore Prevent forced completion handling on an entry that has not yet been assigned an index, c…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00259 · Published 2024-06-19 · Partial fix · 5.5, 5.11 +7 CWE-129
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00239 · Published 2024-05-17 · Partial fix · 5.15.150, 6.1.80 +3
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs a…
CVSS 3.1HIGH 7.1· Local · No auth · No interaction · EPSS 0.00225 · Published 2024-07-05 · Partial fix · 6.6.34, 6.9.5 +1
Priority LOW 30
Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure v…
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00546 · Published 2024-03-14 · Partial fix CWE-1342
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ip6_dst_idev() can return NULL, xfrm6_get_saddr() must act accordingly.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00276 · Published 2024-07-12 · Partial fix · 4.19.317, 5.4.279 +6 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2_log_flush In gfs2_jindex_free(), set sdp->sd_jdesc to NULL under the log flush lock to provide exclusion agai…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2024-07-29 · Partial fix · 5.15.200, 6.1.162 +3 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_nxt is properly initialized on connect Christoph reported a splat hinting at a corrupted snd_una: WARNING: CPU: 1 PID: 38 at net/mptcp…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00267 · Published 2024-05-30 · Partial fix · 5.10.218, 5.15.159 +4
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms During the removal of the idxd driver, registered offline callback is invoked as part of…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00214 · Published 2024-05-20 · Partial fix · 5.15.158, 6.1.90 +3
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" This reverts commit 662404b24a4c4d839839ed25e3097571f5938b9b.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00262 · Published 2024-05-17 · Partial fix · 6.1.162, 6.3 +3
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field If driver read val value sufficient for (val & 0x08) && (!(val & 0…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00241 · Published 2024-05-21 · Partial fix · 5.4.151, 5.10.71 +2 CWE-476