Skip to content
OpenAdvisories
Critical RHSA-2024:10262 22 CVEs

Red Hat Security Advisory: kernel security update

Published Nov 26, 2024 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 43

ReleasePackageFixed in
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos bpftool 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos bpftool-debuginfo 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-abi-stablelists 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-core 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-debug 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-debug-core 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-debug-debuginfo 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-debug-devel 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-debug-modules 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-debug-modules-extra 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-debuginfo 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-debuginfo-common-aarch64 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-debuginfo-common-ppc64le 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-debuginfo-common-s390x 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-debuginfo-common-x86_64 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-devel 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-doc 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-modules 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-modules-extra 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-tools 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-tools-debuginfo 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-tools-libs 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-zfcpdump 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-zfcpdump-core 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-zfcpdump-debuginfo 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-zfcpdump-devel 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-zfcpdump-modules 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos kernel-zfcpdump-modules-extra 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos perf 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos perf-debuginfo 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos python3-perf 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos python3-perf-debuginfo 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::crb bpftool-debuginfo 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::crb kernel-debug-debuginfo 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::crb kernel-debuginfo 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::crb kernel-debuginfo-common-aarch64 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::crb kernel-debuginfo-common-ppc64le 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::crb kernel-debuginfo-common-x86_64 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::crb kernel-tools-debuginfo 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::crb kernel-tools-libs-devel 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::crb perf-debuginfo 0:4.18.0-477.81.1.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::crb python3-perf-debuginfo 0:4.18.0-477.81.1.el8_8

Vulnerabilities 22

  • Critical 9.8
    CVE-2022-48686

    nvme-tcp: fix UAF when detecting digest errors

    In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the io_work loop when we set rd_enabled to true, so we don't attempt to read data from the socket when the TCP stream i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.1
    CVE-2024-46858

    mptcp: pm: Fix uaf in __timer_delete_sync

    In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in __timer_delete_sync There are two paths to access mptcp_pm_del_add_timer, result in a race condition: CPU1 CPU2 ==== ==== net_rx_action napi_poll netlink_sendmsg __napi_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2021-47461

    userfaultfd: fix a race between writeprotect and exit_mmap()

    In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a race between writeprotect and exit_mmap() A race is possible when a process exits, its VMAs are removed by exit_mmap() and at the same time userfaultfd_writeprotect() is ca…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-38564

    bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE

    In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_cre…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-41009

    bpf: Fix overrunning reservations in ringbuf

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf The BPF ring buffer internally is implemented as a power-of-2 sized circular buffer, with two logical and ever-increasing counters: consumer_pos i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2024-41014

    xfs: add bounds checking to xlog_recover_process_data

    In the Linux kernel, the following vulnerability has been resolved: xfs: add bounds checking to xlog_recover_process_data There is a lack of verification of the space occupied by fixed members of xlog_op_header in the xlog_recover_process_data. We can create …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2024-26961

    mac802154: fix llsec key resources release in mac802154_llsec_key_del

    In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key_del() can free resources of a key directly without following the RCU rules for waiting before the end…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2023-0597

    A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Medium 5.3
    CVE-2024-35823

    vt: fix unicode buffer corruption when deleting characters

    In the Linux kernel, the following vulnerability has been resolved: vt: fix unicode buffer corruption when deleting characters This is the same issue that was fixed for the VGA text buffer in commit 39cdb68c64d8 ("vt: fix memory overlapping when deleting char…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-4204 Public exploit

    An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. Thi…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2021-47393

    hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs

    In the Linux kernel, the following vulnerability has been resolved: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs Fan speed minimum can be enforced from sysfs. For example, setting current fan speed to 20 is used to e…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-0500

    A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in th…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2022-23222 Public exploit

    kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availabi…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2022-48773

    xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create

    In the Linux kernel, the following vulnerability has been resolved: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create If there are failures then we must not leave the non-NULL pointers with the error value, otherwise `rpcrdma_ep_destroy` gets c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-48929

    bpf: Fix crash due to out of bounds access into reg2btf_ids.

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to out of bounds access into reg2btf_ids. When commit e6ac2450d6de ("bpf: Support bpf program calling kernel function") added kfunc support, it defined reg2btf_ids as a che…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52489

    mm/sparsemem: fix race in accessing memory_section->usage

    In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section->usage The below race is observed on a PFN which falls into the device memory region with the system memory configuration where PFN's are su…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26671

    blk-mq: fix IO hang from sbitmap wakeup race

    In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix IO hang from sbitmap wakeup race In blk_mq_mark_tag_wait(), __add_wait_queue() may be re-ordered with the following blk_mq_get_driver_tag() in case of getting driver tag failure. …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-31076

    genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

    In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQD_MOVE_PCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instea…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-36889

    mptcp: ensure snd_nxt is properly initialized on connect

    In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_nxt is properly initialized on connect Christoph reported a splat hinting at a corrupted snd_una: WARNING: CPU: 1 PID: 38 at net/mptcp/protocol.c:1005 __mptcp_clean_una+0x4b…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-36920

    scsi: mpi3mr: Avoid memcpy field-spanning write WARNING

    In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Avoid memcpy field-spanning write WARNING When the "storcli2 show" command is executed for eHBA-9600, mpi3mr driver prints this WARNING message: memcpy: detected field-spanning …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-40988

    drm/radeon: fix UBSAN warning in kv_dpm.c

    In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-41023

    sched/deadline: Fix task_struct reference leak

    In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix task_struct reference leak During the execution of the following stress test with linux-rt: stress-ng --cyclic 30 --timeout 30 --minimize --quiet kmemleak frequently repor…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2039178
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2043520
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2044578
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2165926
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2269189
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2272811
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278176
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278931
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2281190
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2282345
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2282896
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2284515
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2284571
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2293429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2293684
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298109
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298412
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300297
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300381
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2315210
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10262.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-4204
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-4204
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-4204
  • article
    https://www.openwall.com/lists/oss-security/2022/01/11/4
  • report
    https://access.redhat.com/security/cve/CVE-2021-47393
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-47393
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-47393
  • article
    https://lore.kernel.org/linux-cve-announce/2024052147-CVE-2021-47393-ea1c@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2021-47461
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-47461
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-47461
  • article
    https://lore.kernel.org/linux-cve-announce/2024052225-CVE-2021-47461-a472@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-0500
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-0500
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-0500
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=20b2aff4bc15bda809f994761d5719827d66c0b4