Skip to content
OpenAdvisories
High ALSA-2025:0059 4 CVEs

Important: kernel security update

Published Jan 8, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: perf/aux: Fix AUX buffer serialization (CVE-2024-46713)
* kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (CVE-2024-50208)
* kernel: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CVE-2024-50252)
* kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 63

ReleasePackageFixed in
AlmaLinux · 9 bpftool 7.4.0-503.21.1.el9_5
AlmaLinux · 9 kernel 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-debug 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-debug-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-debug-devel 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-debug-devel-matched 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-debug-modules 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-debug-modules-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-debug-modules-extra 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-devel 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-devel-matched 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-modules 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-modules-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-64k-modules-extra 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-abi-stablelists 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-cross-headers 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-debug 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-debug-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-debug-devel 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-debug-devel-matched 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-debug-modules 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-debug-modules-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-debug-modules-extra 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-debug-uki-virt 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-devel 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-devel-matched 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-doc 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-headers 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-modules 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-modules-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-modules-extra 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-rt 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-rt-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-rt-debug 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-rt-debug-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-rt-debug-devel 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-rt-debug-modules 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-rt-debug-modules-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-rt-debug-modules-extra 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-rt-devel 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-rt-modules 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-rt-modules-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-rt-modules-extra 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-tools 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-tools-libs 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-tools-libs-devel 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-uki-virt 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-uki-virt-addons 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-zfcpdump 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-zfcpdump-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-zfcpdump-devel 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-zfcpdump-devel-matched 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-zfcpdump-modules 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-zfcpdump-modules-core 5.14.0-503.21.1.el9_5
AlmaLinux · 9 kernel-zfcpdump-modules-extra 5.14.0-503.21.1.el9_5
AlmaLinux · 9 libperf 5.14.0-503.21.1.el9_5
AlmaLinux · 9 perf 5.14.0-503.21.1.el9_5
AlmaLinux · 9 python3-perf 5.14.0-503.21.1.el9_5
AlmaLinux · 9 rtla 5.14.0-503.21.1.el9_5
AlmaLinux · 9 rv 5.14.0-503.21.1.el9_5

Vulnerabilities 4

  • High 7.8
    CVE-2024-46713

    perf/aux: Fix AUX buffer serialization

    In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to fully serialize it. Note that in the loc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-50208

    RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages

    In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages Avoid memory corruption while setting up Level-2 PBL pages for the non MR resources when num_pages > 256K. There will be a single PD…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2024-53122

    mptcp: cope racing subflow creation in mptcp_rcv_space_adjust

    In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-50252

    mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address

    In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address The device stores IPv6 addresses that are used for encapsulation in linear memory that is managed by the driver. Changi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2024-46713
  • report
    https://access.redhat.com/security/cve/CVE-2024-50208
  • report
    https://access.redhat.com/security/cve/CVE-2024-50252
  • report
    https://access.redhat.com/security/cve/CVE-2024-53122
  • report
    https://bugzilla.redhat.com/2312221
  • report
    https://bugzilla.redhat.com/2324611
  • report
    https://bugzilla.redhat.com/2324898
  • report
    https://bugzilla.redhat.com/2329932
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-0059.html