Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 142

Vulnerabilities 5

• High 7.8
  CVE-2024-26642

  netfilter: nf_tables: disallow anonymous set with timeout flag

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 21, 2024
• High 7.8
  CVE-2024-26643

  netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 21, 2024
• High 7.8
  CVE-2024-26804

  net: ip_tunnel: prevent perpetual headroom growth

  In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in __skb_flow_dissect+0x19d1/0x7a50 net/core/flow_dissector.c:1170 Read…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 4, 2024
• High 7.8
  CVE-2024-35890

  gro: fix ownership transfer

  In the Linux kernel, the following vulnerability has been resolved: gro: fix ownership transfer If packets are GROed with fraglist they might be segmented later on and continue their journey in the stack. In skb_segment_list those skbs can be reused as-is. Th…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024
• Unscored —
  CVE-2024-26673

  netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - Disallow families other than NFPROTO_{IPV4,IPV6,INET}. - Disallow layer 4 protocol with no ports, since dest…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 2, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270879
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270881
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2272816
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273423
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3306.json
• report
  https://access.redhat.com/security/cve/CVE-2024-26642
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26642
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26642
• article
  https://lore.kernel.org/linux-cve-announce/2024032150-CVE-2024-26642-3549@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26643
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26643
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26643
• article
  https://lore.kernel.org/linux-cve-announce/2024032150-CVE-2024-26643-4f9d@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26673
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26673
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26673
• article
  https://lore.kernel.org/linux-cve-announce/2024040212-CVE-2024-26673-b2d3@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26804
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26804
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26804
• article
  https://lore.kernel.org/linux-cve-announce/2024040404-CVE-2024-26804-a6ff@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-35890
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281689
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35890
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35890
• article
  https://lore.kernel.org/linux-cve-announce/2024051948-CVE-2024-35890-beaa@gregkh/T