Skip to content
OpenAdvisories
Critical RHSA-2024:10944 9 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Dec 12, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-core 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug-core 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug-debuginfo 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug-devel 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug-kvm 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug-modules 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug-modules-extra 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debuginfo 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debuginfo-common-x86_64 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-devel 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-kvm 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-modules 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-modules-extra 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-core 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debug 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debug-core 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debug-debuginfo 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debug-devel 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debug-modules 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debug-modules-extra 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debuginfo 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debuginfo-common-x86_64 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-devel 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-modules 0:4.18.0-553.32.1.rt7.373.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-modules-extra 0:4.18.0-553.32.1.rt7.373.el8_10

Vulnerabilities 9

  • Critical 9.8
    CVE-2024-46695

    selinux,smack: don't bypass permissions check in inode_setsecctx hook

    In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions check in inode_setsecctx hook Marek Gresko reports that the root user on an NFS client is able to change the security labels on files on an NFS filesys…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-50082

    blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race

    In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race We're seeing crashes from rq_qos_wake_function that look like this: BUG: unable to handle page fault for address: ffffafe180…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-50264

    vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans

    In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopback communication, a dangling pointer can be created in vsk->trans, potentially leading to a Use-After…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2024-50256

    netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() I got a syzbot report without a repro [1] crashing in nf_send_reset6() I think the issue is that dev->hard_header_len is zer…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.3
    CVE-2024-50099

    arm64: probes: Remove broken LDR (literal) uprobe support

    In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Remove broken LDR (literal) uprobe support The simulate_ldr_literal() and simulate_ldrsw_literal() functions are unsafe to use for uprobes. Both functions were originally writt…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-50110

    xfrm: fix one more kernel-infoleak in algo dumping

    In the Linux kernel, the following vulnerability has been resolved: xfrm: fix one more kernel-infoleak in algo dumping During fuzz testing, the following issue was discovered: BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x598/0x2a30 _copy_to_iter+0x598/0x2a3…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-50142

    xfrm: validate new SA's prefixlen using SA family when sel.family is unset

    In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family when sel.family is unset This expands the validation introduced in commit 07bf7908950a ("xfrm: Validate address prefix lengths in the xfrm se…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 4.7
    CVE-2024-50192

    irqchip/gic-v4: Don't allow a VMOVP on a dying VPE

    In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE Kunkun Jiang reported that there is a small window of opportunity for userspace to force a change of affinity for a VPE while the VPE has al…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-49949

    net: avoid potential underflow in qdisc_pkt_len_init() with UFO

    In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdisc_pkt_len_init() with UFO After commit 7c6d2ecbda83 ("net: be more gentle about silly gso requests coming from user") virtio_net_hdr_to_skb() had sanity …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2312083
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2320505
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2322308
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2323904
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2323930
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2324315
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2324612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2324889
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2327168
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10944.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-46695
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-46695
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-46695
  • article
    https://lore.kernel.org/linux-cve-announce/2024091340-CVE-2024-46695-affc@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-49949
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-49949
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-49949
  • article
    https://lore.kernel.org/linux-cve-announce/2024102129-CVE-2024-49949-c792@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-50082
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-50082
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-50082
  • article
    https://lore.kernel.org/linux-cve-announce/2024102937-CVE-2024-50082-c5b1@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-50099
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-50099
  • report
    https://access.redhat.com/security/cve/CVE-2024-50110
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-50110
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-50110
  • article
    https://lore.kernel.org/linux-cve-announce/2024110554-CVE-2024-50110-b4aa@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-50142
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-50142
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-50142
  • article
    https://lore.kernel.org/linux-cve-announce/2024110743-CVE-2024-50142-e0dc@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-50192
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-50192
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-50192
  • article
    https://git.kernel.org/pub/scm/linux/security/vulns.git/tree/cve/published/2024/.CVE-2024-50192mbox
  • report
    https://access.redhat.com/security/cve/CVE-2024-50256
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-50256