Red Hat Security Advisory: kernel security update

Fixed packages 143

Vulnerabilities 4

• High 7.8
  CVE-2024-41009

  bpf: Fix overrunning reservations in ringbuf

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf The BPF ring buffer internally is implemented as a power-of-2 sized circular buffer, with two logical and ever-increasing counters: consumer_pos i…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 17, 2024
• High 7.8
  CVE-2024-50226

  cxl/port: Fix use-after-free, permit out-of-order decoder shutdown

  In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown In support of investigating an initialization failure report [1], cxl_test was updated to register mock memory-devices after…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 9, 2024
• Unscored —
  CVE-2024-42244

  USB: serial: mos7840: fix crash on resume

  In the Linux kernel, the following vulnerability has been resolved: USB: serial: mos7840: fix crash on resume Since commit c49cfa917025 ("USB: serial: use generic method if no alternative is provided in usb serial layer"), USB serial core calls the generic re…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 7, 2024
• Unscored —
  CVE-2024-46679

  ethtool: check device is present when getting link settings

  In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 13, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298412
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2324876
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10274.json
• report
  https://access.redhat.com/security/cve/CVE-2024-41009
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-41009
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-41009
• article
  https://lore.kernel.org/linux-cve-announce/2024071715-CVE-2024-41009-cac5@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-42244
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2303512
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-42244
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-42244
• article
  https://lore.kernel.org/linux-cve-announce/2024080741-CVE-2024-42244-2346@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-46679
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2312067
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-46679
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-46679
• article
  https://lore.kernel.org/linux-cve-announce/2024091336-CVE-2024-46679-3527@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-50226
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-50226
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-50226
• article
  https://lore.kernel.org/linux-cve-announce/2024110928-CVE-2024-50226-4350@gregkh/T