Skip to content
OpenAdvisories
Medium ALSA-2024:4349 8 CVEs

Moderate: kernel security and bug fix update

Published Jul 8, 2024 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (CVE-2023-52626)
* kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset (CVE-2024-26801)
* kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974)
* kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393)
* kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
* kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870)
* kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960)
* kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400)

Bug Fix(es):

* cifs - kernel panic with cifs_put_smb_ses (JIRA:AlmaLinux-28943)
* BUG: unable to handle page fault for address: ff16bf752f593ff8 [almalinux-9.4.z] (JIRA:AlmaLinux-35672)
* [HPE 9.4 Bug] Request merge of AMD address translation library patch series [almalinux-9.4.z] (JIRA:AlmaLinux-36220)
* [AlmaLinux9] kernel BUG at lib/list_debug.c:51! [almalinux-9.4.z] (JIRA:AlmaLinux-36687)
* ice: DPLL-related fixes [almalinux-9.4.z] (JIRA:AlmaLinux-36716)
* CNB95: net/sched: update TC core to upstream v6.8 [almalinux-9.4.z] (JIRA:AlmaLinux-37641)
* IPv6: SR: backport fixes from upstream [almalinux-9.4.z] (JIRA:AlmaLinux-37669)
* [RFE] Backport tmpfs noswap mount option [almalinux-9.4.z] (JIRA:AlmaLinux-38252)
* Isolated cores causing issues on latest AlmaLinux9.4 kernel and not functioning as desired. [almalinux-9.4.z] (JIRA:AlmaLinux-38595)
* [ice] Add automatic VF reset on Tx MDD events [almalinux-9.4.z] (JIRA:AlmaLinux-39083)
* [HPEMC AlmaLinux 9.4 REGRESSION] turbostat: turbostat broken on 10+ sockets. [almalinux-9.4.z] (JIRA:AlmaLinux-34953)
* bnx2x: fix crashes in PCI error handling, resource leaks [almalinux-9.4.z] (JIRA:AlmaLinux-43272)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Fixed packages 62

ReleasePackageFixed in
AlmaLinux · 9 bpftool 7.3.0-427.24.1.el9_4
AlmaLinux · 9 kernel 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-debug 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-debug-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-debug-devel 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-debug-devel-matched 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-debug-modules 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-debug-modules-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-debug-modules-extra 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-devel 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-devel-matched 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-modules 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-modules-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-64k-modules-extra 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-abi-stablelists 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-cross-headers 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-debug 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-debug-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-debug-devel 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-debug-devel-matched 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-debug-modules 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-debug-modules-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-debug-modules-extra 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-debug-uki-virt 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-devel 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-devel-matched 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-doc 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-headers 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-modules 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-modules-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-modules-extra 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-rt 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-rt-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-rt-debug 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-rt-debug-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-rt-debug-devel 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-rt-debug-modules 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-rt-debug-modules-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-rt-debug-modules-extra 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-rt-devel 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-rt-modules 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-rt-modules-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-rt-modules-extra 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-tools 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-tools-libs 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-tools-libs-devel 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-uki-virt 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-zfcpdump 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-zfcpdump-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-zfcpdump-devel 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-zfcpdump-devel-matched 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-zfcpdump-modules 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-zfcpdump-modules-core 5.14.0-427.24.1.el9_4
AlmaLinux · 9 kernel-zfcpdump-modules-extra 5.14.0-427.24.1.el9_4
AlmaLinux · 9 libperf 5.14.0-427.24.1.el9_4
AlmaLinux · 9 perf 5.14.0-427.24.1.el9_4
AlmaLinux · 9 python3-perf 5.14.0-427.24.1.el9_4
AlmaLinux · 9 rtla 5.14.0-427.24.1.el9_4
AlmaLinux · 9 rv 5.14.0-427.24.1.el9_4

Vulnerabilities 8

  • Critical 9.8
    CVE-2024-35870

    smb: client: fix UAF in smb2_reconnect_server()

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2_reconnect_server() The UAF bug is due to smb2_reconnect_server() accessing a session that is already being teared down by another thread that is executing __cifs_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.1
    CVE-2024-35960

    net/mlx5: Properly link new fs rules into the tree

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new fs rules into the tree Previously, add_rule_fg would only add newly created rules from the handle into the tree when they had a refcount of 1. On the other hand, c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2024-26801

    Bluetooth: Avoid potential use-after-free in hci_error_reset

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free in hci_error_reset While handling the HCI_EV_HARDWARE_ERROR event, if the underlying BT controller is not responding, the GPIO reset mechanism would …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2021-47400

    net: hns3: do not allow call hns3_nic_net_open repeatedly

    In the Linux kernel, the following vulnerability has been resolved: net: hns3: do not allow call hns3_nic_net_open repeatedly hns3_nic_net_open() is not allowed to called repeatly, but there is no checking for this. When doing device reset and setup tc concur…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-52667

    net/mlx5e: fix a potential double-free in fs_any_create_groups

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a potential double-free in fs_any_create_groups When kcalloc() for ft->g succeeds but kvzalloc() for in fails, fs_any_create_groups() will free ft->g. However, its caller fs_an…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26974

    crypto: qat - resolve race condition during AER recovery

    In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER system's error recovery process, the kernel driver may encounter a race condition with freeing the reset_data struc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-27393

    xen-netfront: Add missing skb_mark_for_recycle

    In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Add missing skb_mark_for_recycle Notice that skb_mark_for_recycle() is introduced later than fixes tag in commit 6a5bcd84e886 ("page_pool: Allow drivers to hint on SKB recycling…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52626

    net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context Indirection (*) is of lower precedence than postfix increment (++). Logic in napi_poll context would cause an ou…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2021-47400
  • report
    https://access.redhat.com/security/cve/CVE-2023-52626
  • report
    https://access.redhat.com/security/cve/CVE-2023-52667
  • report
    https://access.redhat.com/security/cve/CVE-2024-26801
  • report
    https://access.redhat.com/security/cve/CVE-2024-26974
  • report
    https://access.redhat.com/security/cve/CVE-2024-27393
  • report
    https://access.redhat.com/security/cve/CVE-2024-35870
  • report
    https://access.redhat.com/security/cve/CVE-2024-35960
  • report
    https://bugzilla.redhat.com/2271680
  • report
    https://bugzilla.redhat.com/2273429
  • report
    https://bugzilla.redhat.com/2278354
  • report
    https://bugzilla.redhat.com/2280745
  • report
    https://bugzilla.redhat.com/2281350
  • report
    https://bugzilla.redhat.com/2281740
  • report
    https://bugzilla.redhat.com/2281920
  • report
    https://bugzilla.redhat.com/2282336
  • advisory
    https://errata.almalinux.org/9/ALSA-2024-4349.html