Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 85

Vulnerabilities 5

• Critical 9.8
  CVE-2024-26582

  net: tls: fix use-after-free with partial reads and async decrypt

  In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tls_decrypt_sg doesn't take a reference on the pages from clear_skb, so the put_page() in tls_decrypt_done releases them, and…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 21, 2024
• Critical 9.8
  CVE-2024-26584

  net: tls: handle backlogging of crypto requests

  In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on our requests to the crypto API, crypto_aead_{encrypt,decrypt} can return -EBUSY inst…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 21, 2024
• High 7.8
  CVE-2024-26586

  mlxsw: spectrum_acl_tcam: Fix stack corruption

  In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group in the device. The group contains a lis…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 22, 2024
• High 7.8
  CVE-2024-35890

  gro: fix ownership transfer

  In the Linux kernel, the following vulnerability has been resolved: gro: fix ownership transfer If packets are GROed with fraglist they might be segmented later on and continue their journey in the stack. In skb_segment_list those skbs can be reused as-is. Th…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024
• Medium 6.5
  CVE-2023-6240

  Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation

  A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Feb 4, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2250843
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2265518
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2265519
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2265645
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1881.json
• report
  https://access.redhat.com/security/cve/CVE-2023-6240
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6240
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6240
• article
  https://people.redhat.com/~hkario/marvin/
• article
  https://securitypitfalls.wordpress.com/2023/10/16/experiment-with-side-channel-attacks-yourself/
• report
  https://access.redhat.com/security/cve/CVE-2024-26582
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26582
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26582
• article
  https://lore.kernel.org/linux-cve-announce/2024022139-spruce-prelude-c358@gregkh/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2024-26584
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26584
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26584
• article
  https://lore.kernel.org/linux-cve-announce/2024022148-showpiece-yanking-107c@gregkh/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2024-26586
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26586
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26586
• article
  https://lore.kernel.org/linux-cve-announce/2024022253-CVE-2024-26586-6632@gregkh/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2024-35890
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281689
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35890
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35890
• article
  https://lore.kernel.org/linux-cve-announce/2024051948-CVE-2024-35890-beaa@gregkh/T