Red Hat Security Advisory: kernel-rt security update

Fixed packages 28

Vulnerabilities 7

• High 7.8
  CVE-2023-3812

  Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

  An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 24, 2023
• High 7.8
  CVE-2024-26586

  mlxsw: spectrum_acl_tcam: Fix stack corruption

  In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group in the device. The group contains a lis…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 22, 2024
• Medium 6.5
  CVE-2023-1192

  Use-after-free in smb2_is_status_io_timeout()

  A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses …

  Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Nov 1, 2023
• Medium 5.5
  CVE-2023-4459

  Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

  A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Aug 21, 2023
• Medium 5.5
  CVE-2023-7192

  Kernel: refcount leak in ctnetlink_create_conntrack()

  A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jan 2, 2024
• Unscored —
  CVE-2021-46915

  netfilter: nft_limit: avoid possible divide error in nft_limit_init

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: avoid possible divide error in nft_limit_init div_u64() divides u64 by u32. nft_limit_init() wants to divide u64 by u64, use the appropriate math function (div64_u64) di…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 27, 2024
• Unscored —
  CVE-2024-26602

  sched/membarrier: reduce the ability to hammer on sys_membarrier

  In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on sys_membarrier On some systems, sys_membarrier can be very expensive, causing overall slowdowns for everything. So put a lock on the path in …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 24, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2154178
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2219268
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2224048
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2256279
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2265645
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2266423
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2267695
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2008.json
• report
  https://access.redhat.com/security/cve/CVE-2021-46915
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-46915
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-46915
• article
  https://lore.kernel.org/linux-cve-announce/2024022709-CVE-2021-46915-7ded@gregkh/
• report
  https://access.redhat.com/security/cve/CVE-2023-1192
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1192
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1192
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d527f51331cace562393a8038d870b3e9916686fCVE-2023-52
• report
  https://access.redhat.com/security/cve/CVE-2023-3812
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-3812
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-3812
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=363a5328f4b0
• report
  https://access.redhat.com/security/cve/CVE-2023-4459
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-4459
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-4459
• article
  https://github.com/torvalds/linux/commit/edf410cb74dc612fd47ef5be319c5a0bcd6e6ccd
• report
  https://access.redhat.com/security/cve/CVE-2023-7192
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-7192
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-7192
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=ac4893980bbe79ce383daf9a0885666a30fe4c83
• report
  https://access.redhat.com/security/cve/CVE-2024-26586
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26586
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26586
• article
  https://lore.kernel.org/linux-cve-announce/2024022253-CVE-2024-26586-6632@gregkh/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2024-26602
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26602
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26602
• article
  https://github.com/torvalds/linux/commit/944d5fe50f3f03daacfea16300e656a1691c4a23
• article
  https://lore.kernel.org/linux-cve-announce/2024022414-CVE-2024-26602-5e76@gregkh/