Summary
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: net: nexthop: Initialize all fields in dumped nexthops (CVE-2024-42283)
* kernel: iommufd: Require drivers to supply the cache_invalidate_user ops (CVE-2024-46824)
* kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 63
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | bpftool | 7.4.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-debug | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-debug-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-debug-devel | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-debug-devel-matched | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-debug-modules | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-debug-modules-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-debug-modules-extra | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-devel | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-devel-matched | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-modules | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-modules-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-64k-modules-extra | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-abi-stablelists | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-cross-headers | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-debug | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-debug-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-debug-devel | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-debug-devel-matched | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-debug-modules | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-debug-modules-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-debug-modules-extra | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-debug-uki-virt | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-devel | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-devel-matched | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-doc | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-headers | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-modules | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-modules-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-modules-extra | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-rt | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-rt-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-rt-debug | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-rt-debug-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-rt-debug-devel | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-rt-debug-modules | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-rt-debug-modules-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-rt-debug-modules-extra | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-rt-devel | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-rt-modules | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-rt-modules-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-rt-modules-extra | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-tools | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-tools-libs | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-tools-libs-devel | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-uki-virt | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-uki-virt-addons | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-zfcpdump | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-zfcpdump-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-zfcpdump-devel | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-zfcpdump-devel-matched | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-zfcpdump-modules | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-zfcpdump-modules-core | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | kernel-zfcpdump-modules-extra | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | libperf | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | perf | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | python3-perf | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | rtla | 5.14.0-503.14.1.el9_5 |
| AlmaLinux · 9 | rv | 5.14.0-503.14.1.el9_5 |
Vulnerabilities 3
-
High 8.1
mptcp: pm: Fix uaf in __timer_delete_sync
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in __timer_delete_sync There are two paths to access mptcp_pm_del_add_timer, result in a race condition: CPU1 CPU2 ==== ==== net_rx_action napi_poll netlink_sendmsg __napi_…
-
Unscored —
net: nexthop: Initialize all fields in dumped nexthops
In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops struct nexthop_grp contains two reserved fields that are not initialized by nla_put_nh_group(), and carry garbage. This can be observed …
-
Unscored —
iommufd: Require drivers to supply the cache_invalidate_user ops
In the Linux kernel, the following vulnerability has been resolved: iommufd: Require drivers to supply the cache_invalidate_user ops If drivers don't do this then iommufd will oops invalidation ioctls with something like: Unable to handle kernel NULL pointer …
References
-
report
https://access.redhat.com/security/cve/CVE-2024-42283
-
report
https://access.redhat.com/security/cve/CVE-2024-46824
-
report
https://access.redhat.com/security/cve/CVE-2024-46858
-
report
https://bugzilla.redhat.com/2315176
-
report
https://bugzilla.redhat.com/2315210
-
advisory
https://errata.almalinux.org/9/ALSA-2024-9605.html