Skip to content
OpenAdvisories
High ALSA-2024:5928 41 CVEs

Important: kernel security update

Published Aug 28, 2024 · Updated Oct 29, 2026

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: nftables: nft_set_rbtree skip end interval element from gc (CVE-2024-26581)
* kernel: netfilter: nft_limit: reject configurations that cause integer overflow (CVE-2024-26668)
* kernel: vfio/pci: Lock external INTx masking ops (CVE-2024-26810)
* kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CVE-2024-26855)
* kernel: x86/xen: Add some null pointer checking to smp.c (CVE-2024-26908)
* kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925)
* kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020)
* kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019)
* kernel: netfilter: flowtable: validate pppoe header (CVE-2024-27016)
* kernel: netfilter: bridge: confirm multicast packets before passing them up the stack (CVE-2024-27415)
* kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info (CVE-2024-35839)
* kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898)
* kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion (CVE-2024-35897)
* kernel: netfilter: validate user input for expected length (CVE-2024-35896)
* kernel: netfilter: complete validation of user input (CVE-2024-35962)
* kernel: ice: fix LAG and VF lock dependency in ice_reset_vf() (CVE-2024-36003)
* kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race (CVE-2023-52771)
* kernel: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (CVE-2023-52880)
* kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (CVE-2024-36025)
* kernel: net/mlx5e: Fix netif state handling (CVE-2024-38608)
* kernel: crypto: bcm - Fix pointer arithmetic (CVE-2024-38579)
* kernel: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (CVE-2024-38544)
* kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (CVE-2024-38540)
* kernel: net: bridge: xmit: make sure we have at least eth header len bytes (CVE-2024-38538)
* kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (CVE-2024-39476)
* kernel: ipv6: fix possible race in __fib6_drop_pcpu_from() (CVE-2024-40905)
* kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station (CVE-2024-40911)
* kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CVE-2024-40912)
* kernel: mm/huge_memory: don't unpoison huge_zero_folio (CVE-2024-40914)
* kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CVE-2024-40929)
* kernel: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (CVE-2024-40939)
* kernel: wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CVE-2024-40941)
* kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (CVE-2024-40957)
* kernel: scsi: qedi: Fix crash while reading debugfs attribute (CVE-2024-40978)
* kernel: tipc: force a dst refcount before doing decryption (CVE-2024-40983)
* kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090)
* kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091)
* kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (CVE-2024-41041)
* kernel: NFSv4: Fix memory leak in nfs4_set_security_label (CVE-2024-41076)
* kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CVE-2024-42110)
* kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment (CVE-2024-42152)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 62

ReleasePackageFixed in
AlmaLinux · 9 bpftool 7.3.0-427.33.1.el9_4
AlmaLinux · 9 kernel 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-debug 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-debug-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-debug-devel 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-debug-devel-matched 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-debug-modules 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-debug-modules-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-debug-modules-extra 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-devel 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-devel-matched 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-modules 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-modules-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-64k-modules-extra 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-abi-stablelists 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-cross-headers 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-debug 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-debug-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-debug-devel 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-debug-devel-matched 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-debug-modules 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-debug-modules-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-debug-modules-extra 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-debug-uki-virt 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-devel 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-devel-matched 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-doc 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-headers 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-modules 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-modules-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-modules-extra 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-rt 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-rt-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-rt-debug 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-rt-debug-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-rt-debug-devel 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-rt-debug-modules 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-rt-debug-modules-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-rt-debug-modules-extra 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-rt-devel 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-rt-modules 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-rt-modules-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-rt-modules-extra 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-tools 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-tools-libs 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-tools-libs-devel 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-uki-virt 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-zfcpdump 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-zfcpdump-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-zfcpdump-devel 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-zfcpdump-devel-matched 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-zfcpdump-modules 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-zfcpdump-modules-core 5.14.0-427.33.1.el9_4
AlmaLinux · 9 kernel-zfcpdump-modules-extra 5.14.0-427.33.1.el9_4
AlmaLinux · 9 libperf 5.14.0-427.33.1.el9_4
AlmaLinux · 9 perf 5.14.0-427.33.1.el9_4
AlmaLinux · 9 python3-perf 5.14.0-427.33.1.el9_4
AlmaLinux · 9 rtla 5.14.0-427.33.1.el9_4
AlmaLinux · 9 rv 5.14.0-427.33.1.el9_4

Vulnerabilities 41

  • Critical 9.8

    RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt

    In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt In rxe_comp_queue_pkt() an incoming response packet skb is enqueued to the resp_pkts queue and then a decision is made whether to run the complet…

  • Critical 9.8

    tipc: force a dst refcount before doing decryption

    In the Linux kernel, the following vulnerability has been resolved: tipc: force a dst refcount before doing decryption As it says in commit 3bc07321ccc2 ("xfrm: Force a dst refcount before entering the xfrm type handlers"): "Crypto requests might return async…

  • High 8.8

    netfilter: bridge: confirm multicast packets before passing them up the stack

    In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nf_confirm logic cannot handle cloned skbs referencing the same nf_conn entry, which will happen for mu…

  • High 8.8

    wifi: cfg80211: Lock wiphy in cfg80211_get_station

    In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Lock wiphy in cfg80211_get_station Wiphy should be locked before calling rdev_get_station() (see lockdep assert in ieee80211_get_station()). This fixes the following kernel NU…

  • High 8.8

    tap: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path, which could cause a corrupted skb to be…

  • High 8.8

    tun: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which could cause a corrupted skb to be sent…

  • High 8.1

    wifi: iwlwifi: mvm: don't read past the mfuart notifcation

    In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't read past the mfuart notifcation In case the firmware sends a notification that claims it has more data than it has, we will read past that was allocated for the not…

  • High 7.8

    tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc

    In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a GSM network anyway. Require initial nam…

  • High 7.8
    CVE-2024-26581 Public exploit

    netfilter: nft_set_rbtree: skip end interval element from gc

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval el…

  • High 7.8

    vfio/pci: Lock external INTx masking ops

    In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx may race INTx configuration changes via ioctl. Create wrappers that add locking for paths outs…

  • High 7.8

    netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), o…

  • High 7.8

    netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() nft_unregister_obj() can concurrent with __nft_obj_type_get(), and there is not any protection when iterate over nf_table…

  • High 7.8

    netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() nft_unregister_expr() can concurrent with __nft_expr_type_get(), and there is not any protection when iterate over nf_ta…

  • High 7.8

    netfilter: bridge: replace physindev with physinif in nf_bridge_info

    In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: replace physindev with physinif in nf_bridge_info An skb can be added to a neigh->arp_queue while waiting for an arp reply. Where original skb's skb->dev can be different t…

  • High 7.8

    netfilter: nf_tables: discard table flag update with pending basechain deletion

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: discard table flag update with pending basechain deletion Hook unregistration is deferred to the commit phase, same occurs with hook updates triggered by the table dorma…

  • High 7.8

    udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().

    In the Linux kernel, the following vulnerability has been resolved: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). syzkaller triggered the warning [0] in udp_v4_early_demux(). In udp_v[46]_early_demux() and sk_lookup(), we do not touch the refcount of …

  • High 7.5

    seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors

    In the Linux kernel, the following vulnerability has been resolved: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors input_action_end_dx4() and input_action_end_dx6() are called NF_HOOK() for PREROUTING hook, in PREROUTING h…

  • High 7.5

    net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()

    In the Linux kernel, the following vulnerability has been resolved: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() The following is emitted when using idxd (DSA) dmanegine as the data mover for ntb_transport that ntb_netdev…

  • High 7.5

    nvmet: fix a possible leak when destroy a ctrl during qp establishment

    In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a possible leak when destroy a ctrl during qp establishment In nvmet_sq_destroy we capture sq->ctrl early and if it is non-NULL we know that a ctrl was allocated (in the admin conn…

  • High 7.3

    net: bridge: xmit: make sure we have at least eth header len bytes

    In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an uninit value[1] error in bridge device's xmit path by sending a short (less than ETH_HLEN bytes) skb. To…

  • High 7.1

    netfilter: flowtable: validate pppoe header

    In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate pppoe header Ensure there is sufficient room to access the protocol field of the PPPoe header. Validate it once before the flowtable lookup, then use a helper f…

  • High 7.1

    netfilter: validate user input for expected length

    In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing old bugs exposed by BPF after commit 20f2505fb436 ("bpf: Try to avoid kzalloc in cgroup/{s,g}etsockopt…

  • High 7.1

    netfilter: complete validation of user input

    In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() ca…

  • High 7.1

    wifi: iwlwifi: mvm: check n_ssids before accessing the ssids

    In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids In some versions of cfg80211, the ssids poinet might be a valid one even though n_ssids is 0. Accessing the pointer in this case w…

  • High 7.0

    netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregister_flowtable_type() within nf_flow_inet_module_exit() can concurrent with __nft_flowtable_type_get() wi…

  • Medium 4.4

    cxl/port: Fix delete_endpoint() vs parent unregistration race

    In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix delete_endpoint() vs parent unregistration race The CXL subsystem, at cxl_mem ->probe() time, establishes a lineage of ports (struct cxl_port objects) between an endpoint and th…

  • Medium 4.4

    bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq

    In the Linux kernel, the following vulnerability has been resolved: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq Undefined behavior is triggered when bnxt_qplib_alloc_init_hwq is called with hwq_attr->aux_depth != 0 and hwq_attr->aux_s…

  • Unscored —

    netfilter: nft_limit: reject configurations that cause integer overflow

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as…

  • Unscored —

    net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()

    In the Linux kernel, the following vulnerability has been resolved: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() The function ice_bridge_setlink() may encounter a NULL pointer dereference if nlmsg_find_attr() returns NULL and br_sp…

  • Unscored —
    CVE-2024-26908 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  • Unscored —

    ice: fix LAG and VF lock dependency in ice_reset_vf()

    In the Linux kernel, the following vulnerability has been resolved: ice: fix LAG and VF lock dependency in ice_reset_vf() 9f74a3dfcf83 ("ice: Fix VF Reset paths when interface in a failed over aggregate"), the ice driver has acquired the LAG mutex in ice_rese…

  • Unscored —

    scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()

    In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() The app_reply->elem[] array is allocated earlier in this function and it has app_req.num_ports elements. Thus this > comparison needs …

  • Unscored —

    crypto: bcm - Fix pointer arithmetic

    In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug b…

  • Unscored —

    net/mlx5e: Fix netif state handling

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix netif state handling mlx5e_suspend cleans resources only if netif_device_present() returns true. However, mlx5e_resume changes the state of netif, via mlx5e_nic_enable, only if…

  • Unscored —

    md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING

    In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING Xiao reported that lvm2 test lvconvert-raid-takeover.sh can hang with small possibility, the root cause is e…

  • Unscored —

    ipv6: fix possible race in __fib6_drop_pcpu_from()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible race in __fib6_drop_pcpu_from() syzbot found a race in __fib6_drop_pcpu_from() [1] If compiler reads more than once (*ppcpu_rt), second read could read NULL, if another cpu…

  • Unscored —

    wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()

    In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() The ieee80211_sta_ps_deliver_wakeup() function takes sta->ps_lock to synchronizes with ieee80211_tx_h_unicast_ps_buf() which …

  • Unscored —

    mm/huge_memory: don't unpoison huge_zero_folio

    In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: don't unpoison huge_zero_folio When I did memory failure tests recently, below panic occurs: kernel BUG at include/linux/mm.h:1135! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI…

  • Unscored —

    net: wwan: iosm: Fix tainted pointer delete is case of region creation fail

    In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipc_devlink_create_region(), previously created regions delete process starts fr…

  • Unscored —

    scsi: qedi: Fix crash while reading debugfs attribute

    In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedi_dbg_do_not_recover_cmd_read() function invokes sprintf() directly on a __user pointer, which results into the crash. To fix this…

  • Unscored —

    NFSv4: Fix memory leak in nfs4_set_security_label

    In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix memory leak in nfs4_set_security_label We leak nfs_fattr and nfs4_label every time we set a security xattr.

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-52771
  • report
    https://access.redhat.com/security/cve/CVE-2023-52880
  • report
    https://access.redhat.com/security/cve/CVE-2024-26581
  • report
    https://access.redhat.com/security/cve/CVE-2024-26668
  • report
    https://access.redhat.com/security/cve/CVE-2024-26810
  • report
    https://access.redhat.com/security/cve/CVE-2024-26855
  • report
    https://access.redhat.com/security/cve/CVE-2024-26908
  • report
    https://access.redhat.com/security/cve/CVE-2024-26925
  • report
    https://access.redhat.com/security/cve/CVE-2024-27016
  • report
    https://access.redhat.com/security/cve/CVE-2024-27019
  • report
    https://access.redhat.com/security/cve/CVE-2024-27020
  • report
    https://access.redhat.com/security/cve/CVE-2024-27415
  • report
    https://access.redhat.com/security/cve/CVE-2024-35839
  • report
    https://access.redhat.com/security/cve/CVE-2024-35896
  • report
    https://access.redhat.com/security/cve/CVE-2024-35897
  • report
    https://access.redhat.com/security/cve/CVE-2024-35898
  • report
    https://access.redhat.com/security/cve/CVE-2024-35962
  • report
    https://access.redhat.com/security/cve/CVE-2024-36003
  • report
    https://access.redhat.com/security/cve/CVE-2024-36025
  • report
    https://access.redhat.com/security/cve/CVE-2024-38538
  • report
    https://access.redhat.com/security/cve/CVE-2024-38540
  • report
    https://access.redhat.com/security/cve/CVE-2024-38544
  • report
    https://access.redhat.com/security/cve/CVE-2024-38579
  • report
    https://access.redhat.com/security/cve/CVE-2024-38608
  • report
    https://access.redhat.com/security/cve/CVE-2024-39476
  • report
    https://access.redhat.com/security/cve/CVE-2024-40905
  • report
    https://access.redhat.com/security/cve/CVE-2024-40911
  • report
    https://access.redhat.com/security/cve/CVE-2024-40912
  • report
    https://access.redhat.com/security/cve/CVE-2024-40914
  • report
    https://access.redhat.com/security/cve/CVE-2024-40929
  • report
    https://access.redhat.com/security/cve/CVE-2024-40939
  • report
    https://access.redhat.com/security/cve/CVE-2024-40941
  • report
    https://access.redhat.com/security/cve/CVE-2024-40957
  • report
    https://access.redhat.com/security/cve/CVE-2024-40978
  • report
    https://access.redhat.com/security/cve/CVE-2024-40983
  • report
    https://access.redhat.com/security/cve/CVE-2024-41041
  • report
    https://access.redhat.com/security/cve/CVE-2024-41076
  • report
    https://access.redhat.com/security/cve/CVE-2024-41090
  • report
    https://access.redhat.com/security/cve/CVE-2024-41091