Summary
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
* CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743)
Bug Fix(es):
* ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:AlmaLinux-27009)
* mm/mglru: fix underprotected page cache (JIRA:AlmaLinux-29235)
* [EMR] [TBOOT OS] SUT could not go to S3 state with AlmaLinux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:AlmaLinux-29673)
* system hangs completely - NMI not possible (JIRA:AlmaLinux-30678)
* ice 0000:6f:00.0: PTP failed to get time (JIRA:AlmaLinux-30110)
Fixed packages 62
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | bpftool | 7.3.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-debug | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-debug-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-debug-devel | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-debug-devel-matched | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-debug-modules | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-debug-modules-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-debug-modules-extra | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-devel | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-devel-matched | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-modules | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-modules-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-64k-modules-extra | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-abi-stablelists | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-cross-headers | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-debug | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-debug-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-debug-devel | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-debug-devel-matched | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-debug-modules | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-debug-modules-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-debug-modules-extra | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-debug-uki-virt | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-devel | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-devel-matched | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-doc | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-headers | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-modules | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-modules-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-modules-extra | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-rt | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-rt-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-rt-debug | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-rt-debug-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-rt-debug-devel | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-rt-debug-modules | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-rt-debug-modules-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-rt-debug-modules-extra | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-rt-devel | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-rt-modules | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-rt-modules-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-rt-modules-extra | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-tools | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-tools-libs | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-tools-libs-devel | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-uki-virt | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-zfcpdump | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-zfcpdump-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-zfcpdump-devel | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-zfcpdump-devel-matched | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-zfcpdump-modules | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-zfcpdump-modules-core | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | kernel-zfcpdump-modules-extra | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | libperf | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | perf | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | python3-perf | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | rtla | 5.14.0-427.16.1.el9_4 |
| AlmaLinux · 9 | rv | 5.14.0-427.16.1.el9_4 |
Vulnerabilities 4
-
High 7.1
In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time an…
-
Medium 6.5
Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation
A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.
-
Medium 6.5
In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and …
-
Medium 6.0
Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs
A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition.
References
-
report
https://bugzilla.redhat.com/2250843
-
report
https://bugzilla.redhat.com/2270836
-
advisory
https://errata.almalinux.org/9/ALSA-2024-2758.html
-
report
https://www.redhat.com/security/data/cve/CVE-2023-5090.html
-
report
https://www.redhat.com/security/data/cve/CVE-2023-6240.html
-
report
https://www.redhat.com/security/data/cve/CVE-2024-25742.html
-
report
https://www.redhat.com/security/data/cve/CVE-2024-25743.html