Read the docs
Red Hat Security Advisory

RHSA-2024:8162

kernel security update

Released 2024-10-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 14 records

Priority MEDIUM 41

In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00922 Published 2024-08-17 Partial fix · 4.19.320, 5.4.282 +6 CWE-754
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned to qopt->bands to execute subsequent code logic after kmalloc.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00281 Published 2024-06-19 Partial fix · 5.4.279, 5.10.221 +5 CWE-787
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increased lookup key size from 2 bytes to 16 bytes, because zones_ht_key got a…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00241 Published 2024-08-17 Partial fix · 5.10.224, 5.15.165 +5 CWE-908
TI-2024-26436 CVE-2024-39502 · GHSA-28h9-44vg-f29v

ionic: fix use after netif_napi_del()

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues are started, netif_napi_add() and napi_enable() are called.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00307 Published 2024-07-12 Partial fix · 5.4.279, 5.10.221 +5 CWE-416
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Add a timeout to acquire the command queue semaphore Prevent forced completion handling on an entry that has not yet been assigned an index, c…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00259 Published 2024-06-19 Partial fix · 5.5, 5.11 +7 CWE-129
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00239 Published 2024-05-17 Partial fix · 5.15.150, 6.1.80 +3
Priority LOW 31

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs a…

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00225 Published 2024-07-05 Partial fix · 6.6.34, 6.9.5 +1
Priority LOW 30

Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure v…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00546 Published 2024-03-14 Partial fix CWE-1342
Priority LOW 25

In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ip6_dst_idev() can return NULL, xfrm6_get_saddr() must act accordingly.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00276 Published 2024-07-12 Partial fix · 4.19.317, 5.4.279 +6 CWE-476
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2_log_flush In gfs2_jindex_free(), set sdp->sd_jdesc to NULL under the log flush lock to provide exclusion agai…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00268 Published 2024-07-29 Partial fix · 5.15.200, 6.1.162 +3 CWE-476
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_nxt is properly initialized on connect Christoph reported a splat hinting at a corrupted snd_una: WARNING: CPU: 1 PID: 38 at net/mptcp…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00267 Published 2024-05-30 Partial fix · 5.10.218, 5.15.159 +4
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms During the removal of the idxd driver, registered offline callback is invoked as part of…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00214 Published 2024-05-20 Partial fix · 5.15.158, 6.1.90 +3
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" This reverts commit 662404b24a4c4d839839ed25e3097571f5938b9b.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00262 Published 2024-05-17 Partial fix · 6.1.162, 6.3 +3
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field If driver read val value sufficient for (val & 0x08) && (!(val & 0…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00241 Published 2024-05-21 Partial fix · 5.4.151, 5.10.71 +2 CWE-476