Skip to content
OpenAdvisories
Critical RHSA-2024:3460 7 CVEs

Red Hat Security Advisory: kernel-rt security and bug fix update

Published Sep 24, 2024 · Updated Aug 19, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-core 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-core 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-debuginfo 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-devel 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-kvm 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-modules 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-modules-core 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-modules-extra 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debuginfo 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-devel 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-kvm 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-modules 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-modules-core 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-modules-extra 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-core 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-core 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-debuginfo 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-devel 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-modules 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-modules-core 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-modules-extra 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debuginfo 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-devel 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-modules 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-modules-core 0:5.14.0-284.67.1.rt14.352.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-modules-extra 0:5.14.0-284.67.1.rt14.352.el9_2

Vulnerabilities 7

  • Critical 9.4
    CVE-2024-26828

    cifs: fix underflow in parse_server_interfaces()

    In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26642

    netfilter: nf_tables: disallow anonymous set with timeout flag

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26643

    netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26804

    net: ip_tunnel: prevent perpetual headroom growth

    In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in __skb_flow_dissect+0x19d1/0x7a50 net/core/flow_dissector.c:1170 Read…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26673

    netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - Disallow families other than NFPROTO_{IPV4,IPV6,INET}. - Disallow layer 4 protocol with no ports, since dest…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26735

    ipv6: sr: fix possible use-after-free and null-ptr-deref

    In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26993

    fs: sysfs: Fix reference leak in sysfs_break_active_protection()

    In the Linux kernel, the following vulnerability has been resolved: fs: sysfs: Fix reference leak in sysfs_break_active_protection() The sysfs_break_active_protection() routine has an obvious reference leak in its error path. If the call to kernfs_find_and_ge…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2270879
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2270881
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2272816
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2273278
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2273423
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2275600
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278314
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3460.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-26642
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26642
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26642
  • article
    https://lore.kernel.org/linux-cve-announce/2024032150-CVE-2024-26642-3549@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-26643
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26643
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26643
  • article
    https://lore.kernel.org/linux-cve-announce/2024032150-CVE-2024-26643-4f9d@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-26673
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26673
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26673
  • article
    https://lore.kernel.org/linux-cve-announce/2024040212-CVE-2024-26673-b2d3@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-26735
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26735
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26735
  • article
    https://lore.kernel.org/linux-cve-announce/2024040359-CVE-2024-26735-462f@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-26804
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26804
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26804
  • article
    https://lore.kernel.org/linux-cve-announce/2024040404-CVE-2024-26804-a6ff@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-26828
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26828
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26828
  • article
    https://lore.kernel.org/linux-cve-announce/2024041703-CVE-2024-26828-b2be@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-26993
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26993
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26993
  • article
    https://lore.kernel.org/linux-cve-announce/2024050144-CVE-2024-26993-fe52@gregkh/T