Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 81

Vulnerabilities 4

• High 7.8
  CVE-2022-49291

  ALSA: pcm: Fix races among concurrent hw_params and hw_free calls

  In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent hw_params and hw_free calls Currently we have neither proper check nor protection against the concurrent calls of PCM hw_params and hw_free ioctls, which…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 26, 2025
• High 7.8
  CVE-2024-26642

  netfilter: nf_tables: disallow anonymous set with timeout flag

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 21, 2024
• Unscored —
  CVE-2022-1048

  A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PC…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Apr 29, 2022
• Unscored —
  CVE-2024-26993

  fs: sysfs: Fix reference leak in sysfs_break_active_protection()

  In the Linux kernel, the following vulnerability has been resolved: fs: sysfs: Fix reference leak in sysfs_break_active_protection() The sysfs_break_active_protection() routine has an obvious reference leak in its error path. If the call to kernfs_find_and_ge…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2066706
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270881
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278314
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4107.json
• report
  https://access.redhat.com/security/cve/CVE-2022-1048
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1048
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1048
• article
  https://lore.kernel.org/lkml/20220322170720.3529-5-tiwai@suse.de/T/#m1d3b791b815556012c6be92f1c4a7086b854f7f3
• report
  https://access.redhat.com/security/cve/CVE-2022-49291
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2347842
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-49291
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-49291
• article
  https://lore.kernel.org/linux-cve-announce/2025022633-CVE-2022-49291-8c67@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26642
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26642
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26642
• article
  https://lore.kernel.org/linux-cve-announce/2024032150-CVE-2024-26642-3549@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26993
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26993
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26993
• article
  https://lore.kernel.org/linux-cve-announce/2024050144-CVE-2024-26993-fe52@gregkh/T