Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 84

Vulnerabilities 7

• Critical 9.4
  CVE-2024-26828

  cifs: fix underflow in parse_server_interfaces()

  In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 17, 2024
• High 7.8
  CVE-2024-26642

  netfilter: nf_tables: disallow anonymous set with timeout flag

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 21, 2024
• High 7.8
  CVE-2024-26643

  netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 21, 2024
• High 7.8
  CVE-2024-26804

  net: ip_tunnel: prevent perpetual headroom growth

  In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in __skb_flow_dissect+0x19d1/0x7a50 net/core/flow_dissector.c:1170 Read…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 4, 2024
• Unscored —
  CVE-2024-26673

  netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - Disallow families other than NFPROTO_{IPV4,IPV6,INET}. - Disallow layer 4 protocol with no ports, since dest…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 2, 2024
• Unscored —
  CVE-2024-26735

  ipv6: sr: fix possible use-after-free and null-ptr-deref

  In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 3, 2024
• Unscored —
  CVE-2024-26993

  fs: sysfs: Fix reference leak in sysfs_break_active_protection()

  In the Linux kernel, the following vulnerability has been resolved: fs: sysfs: Fix reference leak in sysfs_break_active_protection() The sysfs_break_active_protection() routine has an obvious reference leak in its error path. If the call to kernfs_find_and_ge…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270879
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270881
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2272816
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273278
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273423
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2275600
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278314
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3461.json
• report
  https://access.redhat.com/security/cve/CVE-2024-26642
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26642
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26642
• article
  https://lore.kernel.org/linux-cve-announce/2024032150-CVE-2024-26642-3549@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26643
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26643
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26643
• article
  https://lore.kernel.org/linux-cve-announce/2024032150-CVE-2024-26643-4f9d@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26673
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26673
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26673
• article
  https://lore.kernel.org/linux-cve-announce/2024040212-CVE-2024-26673-b2d3@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26735
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26735
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26735
• article
  https://lore.kernel.org/linux-cve-announce/2024040359-CVE-2024-26735-462f@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26804
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26804
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26804
• article
  https://lore.kernel.org/linux-cve-announce/2024040404-CVE-2024-26804-a6ff@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26828
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26828
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26828
• article
  https://lore.kernel.org/linux-cve-announce/2024041703-CVE-2024-26828-b2be@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26993
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26993
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26993
• article
  https://lore.kernel.org/linux-cve-announce/2024050144-CVE-2024-26993-fe52@gregkh/T