Skip to content
OpenAdvisories
High RHSA-2024:10771 36 CVEs

Red Hat Security Advisory: kernel security update

Published Dec 4, 2024 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 142

ReleasePackageFixed in
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream bpftool-debuginfo 0:7.3.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-64k-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-64k-debug-devel 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-64k-debug-devel-matched 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-64k-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-64k-devel 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-64k-devel-matched 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-debug-devel 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-debug-devel-matched 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-debuginfo-common-aarch64 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-debuginfo-common-ppc64le 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-debuginfo-common-s390x 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-debuginfo-common-x86_64 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-devel 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-devel-matched 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-doc 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-rt-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-rt-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-tools-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-zfcpdump-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-zfcpdump-devel 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream kernel-zfcpdump-devel-matched 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream libperf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream perf 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream perf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream python3-perf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream rtla 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream rv 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos bpftool 0:7.3.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos bpftool-debuginfo 0:7.3.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-64k 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-64k-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-64k-debug 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-64k-debug-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-64k-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-64k-debug-modules 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-64k-debug-modules-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-64k-debug-modules-extra 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-64k-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-64k-modules 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-64k-modules-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-64k-modules-extra 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-abi-stablelists 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-debug 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-debug-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-debug-modules 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-debug-modules-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-debug-modules-extra 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-debug-uki-virt 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-debuginfo-common-aarch64 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-debuginfo-common-ppc64le 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-debuginfo-common-s390x 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-debuginfo-common-x86_64 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-modules 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-modules-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-modules-extra 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-rt-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-rt-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-tools 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-tools-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-tools-libs 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-uki-virt 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-zfcpdump 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-zfcpdump-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-zfcpdump-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-zfcpdump-modules 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-zfcpdump-modules-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos kernel-zfcpdump-modules-extra 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos libperf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos perf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos python3-perf 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::baseos python3-perf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb bpftool-debuginfo 0:7.3.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-64k-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-64k-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-debuginfo-common-aarch64 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-debuginfo-common-ppc64le 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-debuginfo-common-s390x 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-debuginfo-common-x86_64 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-rt-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-rt-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-tools-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-tools-libs-devel 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb kernel-zfcpdump-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb libperf 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb libperf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb perf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb python3-perf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv bpftool-debuginfo 0:7.3.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-debuginfo-common-x86_64 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-debug 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-debug-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-debug-devel 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-debug-kvm 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-debug-modules 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-debug-modules-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-debug-modules-extra 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-devel 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-kvm 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-modules 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-modules-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-rt-modules-extra 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv kernel-tools-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv libperf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv perf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::nfv python3-perf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime bpftool-debuginfo 0:7.3.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-debuginfo-common-x86_64 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-debug 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-debug-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-debug-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-debug-devel 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-debug-modules 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-debug-modules-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-debug-modules-extra 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-devel 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-modules 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-modules-core 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-rt-modules-extra 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime kernel-tools-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime libperf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime perf-debuginfo 0:5.14.0-427.47.1.el9_4
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::realtime python3-perf-debuginfo 0:5.14.0-427.47.1.el9_4

Vulnerabilities 36

  • High 8.2
    CVE-2023-52775

    net/smc: avoid data corruption caused by decline

    In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during testing of SMC-R on Redis applications. The benchmark has a low probability of reporting a strange err…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26601

    ext4: regenerate buddy after block freeing failed if under fc replay

    In the Linux kernel, the following vulnerability has been resolved: ext4: regenerate buddy after block freeing failed if under fc replay This mostly reverts commit 6bd97bf273bd ("ext4: remove redundant mb_regenerate_buddy()") and reintroduces mb_regenerate_bu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26704

    ext4: fix double-free of blocks due to wrong extents moved_len

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix double-free of blocks due to wrong extents moved_len In ext4_move_extents(), moved_len is only updated when all moves are successfully executed, and only discards orig_inode and don…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-36928

    s390/qeth: Fix kernel panic after setting hsuid

    In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Fix kernel panic after setting hsuid Symptom: When the hsuid attribute is set for the first time on an IQD Layer3 device while the corresponding network interface is already UP, th…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-38384

    blk-cgroup: fix list corruption from reorder of WRITE ->lqueued

    In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from reorder of WRITE ->lqueued __blkcg_rstat_flush() can be run anytime, especially when blk_cgroup_bio_start is being executed. If WRITE of `->lqueued` is re…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-38541

    of: module: add buffer overflow check in of_modalias()

    In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_modalias() In of_modalias(), if the buffer happens to be too small even for the 1st snprintf() call, the len parameter will become negative and str…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-41008

    drm/amdgpu: change vm->task_info handling

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm->task_info handling This patch changes the handling and lifecycle of vm->task_info object. The major changes are: - vm->task_info is a dynamically allocated ptr now, and…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-41009

    bpf: Fix overrunning reservations in ringbuf

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf The BPF ring buffer internally is implemented as a power-of-2 sized circular buffer, with two logical and ever-increasing counters: consumer_pos i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-41038

    firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers

    In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-42271

    net/iucv: fix use after free in iucv_sock_close()

    In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use after free in iucv_sock_close() iucv_sever_path() is called from process context and from bh context. iucv->path is used as indicator whether somebody else is taking care of…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2024-41007

    tcp: avoid too many retransmit packets

    In the Linux kernel, the following vulnerability has been resolved: tcp: avoid too many retransmit packets If a TCP socket is using TCP_USER_TIMEOUT, and the other peer retracted its window to zero, tcp_retransmit_timer() can retransmit a packet every two jif…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.3
    CVE-2024-41056

    firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files

    In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files Use strnlen() instead of strlen() on the algorithm and coefficient name string arrays in V1 wmfw files. In V1 wmfw files the na…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2024-36960

    drm/vmwgfx: Fix invalid reads in fence signaled events

    In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drm_event to the size of the structure that's actually used. The length of the drm_event was set to the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.0
    CVE-2024-38555

    net/mlx5: Discard command completions in internal error

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Discard command completions in internal error Fix use after free when FW completion arrives while device is in internal error state. Avoid calling completion handler in this case, s…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.0
    CVE-2024-39507

    net: hns3: fix kernel crash problem in concurrent scenario

    In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent scenario When link status change, the nic driver need to notify the roce driver to handle this event, but at this time, the roce driver may u…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2023-52811

    scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool

    In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool In practice the driver should never send more commands than are allocated to a queue's event pool. In the unlikely event that th…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-48804

    vt_ioctl: fix array_index_nospec in vt_setactivate

    In the Linux kernel, the following vulnerability has been resolved: vt_ioctl: fix array_index_nospec in vt_setactivate array_index_nospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52619

    pstore/ram: Fix crash when setting number of cpus to an odd number

    In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52635

    PM / devfreq: Synchronize devfreq_monitor_[start/stop]

    In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Synchronize devfreq_monitor_[start/stop] There is a chance if a frequent switch of the governor done in a loop result in timer list corruption where timer cancel being done from…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53503

    ext4: allow ext4_get_group_info() to fail

    In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4_get_group_info() to fail Previously, ext4_get_group_info() would treat an invalid group number as BUG(), since in theory it should never happen. However, if a malicious attak…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53861

    ext4: correct grp validation in ext4_mb_good_group

    In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access memory of grp and will trigger kernel crash if grp is NULL. So do NULL check before corruption check.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26615

    net/smc: fix illegal rmb_desc access in SMC-D connection dump

    In the Linux kernel, the following vulnerability has been resolved: net/smc: fix illegal rmb_desc access in SMC-D connection dump A crash was found when dumping SMC-D connections. It can be reproduced by following steps: - run nginx/wrk test: smc_run nginx sm…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26686

    fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

    In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task_sighand() can trigger a hard lockup. If NR_CPUS threads call do_task_stat() at the same time and the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-27399

    Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout There is a race condition between l2cap_chan_timeout() and l2cap_chan_del(). When we use l2cap_chan_del() to delete the channel, the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-40997

    cpufreq: amd-pstate: fix memory leak on CPU EPP exit

    In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix memory leak on CPU EPP exit The cpudata memory from kzalloc() in amd_pstate_epp_cpu_init() is not freed in the analogous exit function, so fix that. [ rjw: Subject an…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-41031

    mm/filemap: skip to create PMD-sized page cache if needed

    In the Linux kernel, the following vulnerability has been resolved: mm/filemap: skip to create PMD-sized page cache if needed On ARM64, HPAGE_PMD_ORDER is 13 when the base page size is 64KB. The PMD-sized page cache can't be supported by xarray as the followi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-41093

    drm/amdgpu: avoid using null object of framebuffer

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid using null object of framebuffer Instead of using state->fb->obj[0] directly, get object from framebuffer by calling drm_gem_fb_get_obj() and return error code when object i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42154

    tcp_metrics: validate source addr length

    In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long, and the policy doesn't have an entry for this attribute at al…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42228

    drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc Initialize the size before calling amdgpu_vce_cs_reloc, such as case 0x03000001. V2: To really improve the handlin…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42237

    firmware: cs_dsp: Validate payload length before processing block

    In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Validate payload length before processing block Move the payload length check in cs_dsp_load() and cs_dsp_coeff_load() to be done before the block is processed. The check th…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42238

    firmware: cs_dsp: Return error if block header overflows file

    In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Return error if block header overflows file Return an error from cs_dsp_power_up() if a block header is longer than the amount of data left in the file. The previous code in…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42240

    x86/bhi: Avoid warning in #DB handler due to BHI mitigation

    In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in #DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entry_SYSENTER_compat() uses CLEAR_BRANCH_HISTORY …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42241

    mm/shmem: disable PMD-sized page cache if needed

    In the Linux kernel, the following vulnerability has been resolved: mm/shmem: disable PMD-sized page cache if needed For shmem files, it's possible that PMD-sized page cache can't be supported by xarray. For example, 512MB page cache on ARM64 when the base pa…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42243

    mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

    In the Linux kernel, the following vulnerability has been resolved: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2. Currently, xarray can't support arbitrary page cach…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42244

    USB: serial: mos7840: fix crash on resume

    In the Linux kernel, the following vulnerability has been resolved: USB: serial: mos7840: fix crash on resume Since commit c49cfa917025 ("USB: serial: use generic method if no alternative is provided in usb serial layer"), USB serial core calls the generic re…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-44989

    bonding: fix xfrm real_dev null pointer dereference

    In the Linux kernel, the following vulnerability has been resolved: bonding: fix xfrm real_dev null pointer dereference We shouldn't set real_dev to NULL because packets can be in transit and xfrm might call xdo_dev_offload_ok() in parallel. All callbacks ass…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2265836
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2267355
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2270084
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2272808
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2273109
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2273174
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2280462
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2282690
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2282743
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2290408
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2293444
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2293458
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2294220
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297581
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297702
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297909
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298079
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298140
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298412
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300395
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300407
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300430
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300488
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2301522
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2303077
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2309852
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10771.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-48804
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-48804
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-48804
  • article
    https://lore.kernel.org/linux-cve-announce/2024071645-CVE-2022-48804-f191@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-52619
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-52619
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-52619
  • article
    https://lore.kernel.org/linux-cve-announce/20240318102117.2839904-9-lee@kernel.org/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-52635
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-52635
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-52635