Skip to content
OpenAdvisories
Critical RHSA-2024:4447 18 CVEs

Red Hat Security Advisory: kernel security update

Published Oct 1, 2024 · Updated Sep 11, 2026

Ecosystem: Red Hat

Fixed packages 81

ReleasePackageFixed in
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos bpftool 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos bpftool-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-abi-stablelists 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-core 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-core 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-devel 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-modules 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-modules-extra 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debuginfo-common-x86_64 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-devel 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-doc 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-modules 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-modules-extra 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools-libs 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos perf 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos perf-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-perf 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-perf-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos bpftool 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos bpftool-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-abi-stablelists 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-core 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debug 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debug-core 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debug-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debug-devel 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debug-modules 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debug-modules-extra 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debuginfo-common-aarch64 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debuginfo-common-ppc64le 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debuginfo-common-s390x 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debuginfo-common-x86_64 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-devel 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-doc 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-modules 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-modules-extra 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-tools 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-tools-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-tools-libs 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-zfcpdump 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-zfcpdump-core 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-zfcpdump-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-zfcpdump-devel 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-zfcpdump-modules 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-zfcpdump-modules-extra 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos perf 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos perf-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python3-perf 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python3-perf-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos bpftool 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos bpftool-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-abi-stablelists 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-core 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debug 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debug-core 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debug-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debug-devel 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debug-modules 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debug-modules-extra 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debuginfo-common-x86_64 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-devel 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-doc 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-modules 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-modules-extra 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-tools 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-tools-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-tools-libs 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos perf 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos perf-debuginfo 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python3-perf 0:4.18.0-372.111.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python3-perf-debuginfo 0:4.18.0-372.111.1.el8_6

Vulnerabilities 18

  • Critical 9.8
    CVE-2024-26583

    tls: fix race between async notify and socket close

    In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread (one which called recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete() so any code past tha…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-26584

    net: tls: handle backlogging of crypto requests

    In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on our requests to the crypto API, crypto_aead_{encrypt,decrypt} can return -EBUSY inst…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-26585

    tls: fix race between tx work scheduling and socket close

    In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, the submitting thread (recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete(). …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-36886 Public exploit

    tipc: fix UAF in error path

    In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative reported a UAF in the tipc_buf_append() error path: BUG: KASAN: slab-use-after-free in kfree_skb_list…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2024-26801

    Bluetooth: Avoid potential use-after-free in hci_error_reset

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free in hci_error_reset While handling the HCI_EV_HARDWARE_ERROR event, if the underlying BT controller is not responding, the GPIO reset mechanism would …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2024-35969

    ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr

    In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Although ipv6_get_ifaddr walks inet6_addr_lst under the RCU lock, it still means hlist_for_each_entry_rcu can return an item…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26804

    net: ip_tunnel: prevent perpetual headroom growth

    In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in __skb_flow_dissect+0x19d1/0x7a50 net/core/flow_dissector.c:1170 Read…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-27397

    netfilter: nf_tables: use timestamp to check for set element timeout

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use timestamp to check for set element timeout Add a timestamp field at the beginning of the transaction, store it in the nftables per-netns area. Update set backend .in…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-35958

    net: ena: Fix incorrect descriptor free behavior

    In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix incorrect descriptor free behavior ENA has two types of TX queues: - queues which only process TX packets arriving from the network stack - queues which only process TX packets …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-47293

    net/sched: act_skbmod: Skip non-Ethernet packets

    In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbmod: Skip non-Ethernet packets Currently tcf_skbmod_act() assumes that packets use Ethernet as their L2 protocol, which is not always the case. As an example, for CAN device…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-47310

    net: ti: fix UAF in tlan_remove_one

    In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlan_remove_one priv is netdev private data and it cannot be used after free_netdev() call. Using priv after free_netdev() can cause UAF bug. Fix it by moving free_netdev(…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-1789

    With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed wi…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2022-50030

    scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input

    In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input Malformed user input to debugfs results in buffer overflow crashes. Adapt input string lengths to fit within i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-50467

    scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID

    In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID An error case exit from lpfc_cmpl_ct_cmd_gft_id() results in a call to lpfc_nlp_put() with a null pointer to a nodel…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-52924

    netfilter: nf_tables: don't skip expired elements during walk

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't skip expired elements during walk There is an asymmetry between commit/abort and preparation phase if the following conditions are met: 1. set is a verdict map ("1…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26735

    ipv6: sr: fix possible use-after-free and null-ptr-deref

    In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-36005

    netfilter: nf_tables: honor table dormant flag from netdev release event path

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: honor table dormant flag from netdev release event path Check for table dormant flag otherwise netdev release event path tries to unregister an already unregistered hook…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-36952

    scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

    In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2090723
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2265517
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2265519
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2265520
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2273278
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2273423
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2273429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2277238
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2280434
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2281900
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2281925
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2281949
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2282472
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2282504
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2284598
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4447.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-47293
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-47293
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-47293
  • article
    https://lore.kernel.org/linux-cve-announce/2024052123-CVE-2021-47293-0cbe@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2021-47310
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-47310
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-47310
  • article
    https://lore.kernel.org/linux-cve-announce/2024052128-CVE-2021-47310-a59d@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-1789
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-1789
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-1789
  • advisory
    https://github.com/advisories/GHSA-v8pq-23qj-q7x7
  • article
    https://www.openwall.com/lists/oss-security/2022/05/25/2
  • report
    https://access.redhat.com/security/cve/CVE-2022-50030
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2373453
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50030
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50030
  • article
    https://lore.kernel.org/linux-cve-announce/2025061838-CVE-2022-50030-83c6@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-50467
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2400723
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50467
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50467