Red Hat Security Advisory: kernel security update

Fixed packages 85

Vulnerabilities 48

• High 8.8
  CVE-2024-26931

  scsi: qla2xxx: Fix command flush on cable pull

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to command failed to flush back to SCSI layer. BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 PGD 0 …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 1, 2024
• High 8.1
  CVE-2022-48743

  net: amd-xgbe: Fix skb data length underflow

  In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fix skb data length underflow There will be BUG_ON() triggered in include/linux/skbuff.h leading to intermittent kernel panic, when the skb length underflow is detected. Fix th…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 20, 2024
• High 8.1
  CVE-2023-52434

  smb: client: fix potential OOBs in smb2_parse_contexts()

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_contexts() Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts(). This fixes following oops when accessing i…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 20, 2024
• High 7.8
  CVE-2021-47459

  can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv

  In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv It will trigger UAF for rx_kref of j1939_priv as following. cpu0 cpu1 j1939_sk_bind(socket0, ndev0, ...) j1939_netdev_start…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 22, 2024
• High 7.8
  CVE-2023-52439

  uio: Fix use-after-free in uio_open

  In the Linux kernel, the following vulnerability has been resolved: uio: Fix use-after-free in uio_open core-1 core-2 ------------------------------------------------------- uio_unregister_device uio_open idev = idr_find() device_unregister(&idev->dev) put_de…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 20, 2024
• High 7.8
  CVE-2023-52707

  sched/psi: Fix use-after-free in ep_remove_wait_queue()

  In the Linux kernel, the following vulnerability has been resolved: sched/psi: Fix use-after-free in ep_remove_wait_queue() If a non-root cgroup gets removed when there is a thread that registered trigger and is polling on a pressure file within the cgroup, t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• High 7.8
  CVE-2023-5633

  Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

  The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Oct 23, 2023
• High 7.8
  CVE-2024-26581 Public exploit

  netfilter: nft_set_rbtree: skip end interval element from gc

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval el…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 20, 2024
• High 7.8
  CVE-2024-26704

  ext4: fix double-free of blocks due to wrong extents moved_len

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix double-free of blocks due to wrong extents moved_len In ext4_move_extents(), moved_len is only updated when all moves are successfully executed, and only discards orig_inode and don…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 3, 2024
• High 7.8
  CVE-2024-26739

  net/sched: act_mirred: don't override retval if we already lost the skb

  In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: don't override retval if we already lost the skb If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we need to tell the core to drop the skb by…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 3, 2024
• High 7.8
  CVE-2024-26773

  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()

  In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() Determine if the group block bitmap is corrupted before using ac_b_ex in ext4_mb_try_best_found() to avoid alloc…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 3, 2024
• High 7.8
  CVE-2024-26808

  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain Remove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER event is reported, otherwise a stale re…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 4, 2024
• High 7.8
  CVE-2024-26810

  vfio/pci: Lock external INTx masking ops

  In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx may race INTx configuration changes via ioctl. Create wrappers that add locking for paths outs…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 5, 2024
• High 7.8
  CVE-2024-26880

  dm: call the resume method on internal suspend

  In the Linux kernel, the following vulnerability has been resolved: dm: call the resume method on internal suspend There is this reported crash when experimenting with the lvm2 testsuite. The list corruption is caused by the fact that the postsuspend and resu…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 17, 2024
• High 7.8
  CVE-2024-26923

  af_unix: Fix garbage collector racing against connect()

  In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a pe…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 24, 2024
• High 7.8
  CVE-2024-26925

  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), o…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 24, 2024
• High 7.8
  CVE-2024-27019

  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() nft_unregister_obj() can concurrent with __nft_obj_type_get(), and there is not any protection when iterate over nf_table…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2024
• High 7.8
  CVE-2024-27020

  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() nft_unregister_expr() can concurrent with __nft_expr_type_get(), and there is not any protection when iterate over nf_ta…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2024
• High 7.8
  CVE-2024-35791

  KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()

  In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() Do the cache flush of converted pages in svm_register_enc_region() before dropping kvm->lock to fix use-after-fre…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 17, 2024
• High 7.8
  CVE-2024-35897

  netfilter: nf_tables: discard table flag update with pending basechain deletion

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: discard table flag update with pending basechain deletion Hook unregistration is deferred to the commit phase, same occurs with hook updates triggered by the table dorma…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024
• High 7.8
  CVE-2024-35950

  drm/client: Fully protect modes[] with dev->mode_config.mutex

  In the Linux kernel, the following vulnerability has been resolved: drm/client: Fully protect modes[] with dev->mode_config.mutex The modes[] array contains pointers to modes on the connectors' mode lists, which are protected by dev->mode_config.mutex. Thus w…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 20, 2024
• High 7.8
  CVE-2024-36904

  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().

  In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Anderson Nascimento reported a use-after-free splat in tcp_twsk_unique() with nice analysis. Since commit ec94c2696f0b ("tcp/dccp: avoid…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 30, 2024
• High 7.8
  CVE-2024-36978

  net: sched: sch_multiq: fix possible OOB write in multiq_tune()

  In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned to qopt->bands to execute subsequent code logic after kmalloc. So the old q->bands should not be used…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 19, 2024
• High 7.3
  CVE-2024-35899

  netfilter: nf_tables: flush pending destroy work before exit_net release

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: flush pending destroy work before exit_net release Similar to 2c9f0293280e ("netfilter: nf_tables: flush pending destroy work before netlink notifier") to address a race…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024
• High 7.1
  CVE-2024-27016

  netfilter: flowtable: validate pppoe header

  In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate pppoe header Ensure there is sufficient room to access the protocol field of the PPPoe header. Validate it once before the flowtable lookup, then use a helper f…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2024
• Medium 6.7
  CVE-2023-33951

  Kernel: vmwgfx: race condition leading to information disclosure vulnerability

  A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 24, 2023
• Medium 6.7
  CVE-2023-33952

  Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects

  A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which m…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 24, 2023
• Medium 6.3
  CVE-2022-36402

  There is an int overflow vulnerability in vmwgfx driver

  An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain …

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 16, 2022
• Medium 6.3
  CVE-2022-38457

  There is an UAF vulnerability in vmwgfx driver

  A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 9, 2022
• Medium 6.3
  CVE-2022-40133

  There is an UAF vulnerability in vmwgfx driver

  A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account …

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 9, 2022
• Medium 5.5
  CVE-2023-52518

  Bluetooth: hci_codec: Fix leaking content of local_codecs

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_codec: Fix leaking content of local_codecs The following memory leak can be observed when the controller supports codecs which are stored in local_codecs list but the elements …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 2, 2024
• Medium 5.5
  CVE-2023-52811

  scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool

  In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool In practice the driver should never send more commands than are allocated to a queue's event pool. In the unlikely event that th…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• Medium 5.5
  CVE-2023-53421

  blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()

  In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() When blkg_alloc() is called to allocate a blkcg_gq structure with the associated blkg_iostat_set's, there are 2 fields…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 18, 2025
• Medium 5.5
  CVE-2024-1151

  Kernel: stack overflow problem in open vswitch kernel module leading to dos

  A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and ca…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Feb 11, 2024
• Unscored —
  CVE-2023-52450

  perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()

  In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() Get logical socket id instead of physical id in discover_upi_topology() to avoid out-of-bound access on 'upi =…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 22, 2024
• Unscored —
  CVE-2023-52578

  net: bridge: use DEV_STATS_INC()

  In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_finish() [1] This function can run from multiple cpus without mutual exclusion. Adopt SMP safe DEV_STATS_I…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 2, 2024
• Unscored —
  CVE-2024-26668

  netfilter: nft_limit: reject configurations that cause integer overflow

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 2, 2024
• Unscored —
  CVE-2024-26698

  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove

  In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove In commit ac5047671758 ("hv_netvsc: Disable NAPI before closing the VMBus channel"), napi_disable was getting called for a…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 3, 2024
• Unscored —
  CVE-2024-26908 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  Apr 17, 2024
• Unscored —
  CVE-2024-26929 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  May 1, 2024
• Unscored —
  CVE-2024-26982

  Squashfs: check the inode number is not the invalid value of zero

  In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero Syskiller has produced an out of bounds access in fill_meta_index(). That out of bounds access is ultimately caused because t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2024
• Unscored —
  CVE-2024-27065

  netfilter: nf_tables: do not compare internal table flags on updates

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 1, 2024
• Unscored —
  CVE-2024-27417

  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()

  In the Linux kernel, the following vulnerability has been resolved: ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() It seems that if userspace provides a correct IFA_TARGET_NETNSID value but no IFA_ADDRESS and IFA_LOCAL attributes, inet6_rtm_geta…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 17, 2024
• Unscored —
  CVE-2024-36025

  scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() The app_reply->elem[] array is allocated earlier in this function and it has app_req.num_ports elements. Thus this > comparison needs …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 30, 2024
• Unscored —
  CVE-2024-36489

  tls: fix missing memory barrier in tls_init

  In the Linux kernel, the following vulnerability has been resolved: tls: fix missing memory barrier in tls_init In tls_init(), a write memory barrier is missing, and store-store reordering may cause NULL dereference in tls_{setsockopt,getsockopt}. CPU0 CPU1 -…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 21, 2024
• Unscored —
  CVE-2024-36924

  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() lpfc_worker_wake_up() calls the lpfc_work_done() routine, which takes the hbalock. Thus, lpfc_worker_wake_up() should not be c…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 30, 2024
• Unscored —
  CVE-2024-36952

  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 30, 2024
• Unscored —
  CVE-2024-38596

  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg

  In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg A data-race condition has been identified in af_unix. In one data path, the write function unix_release_sock() atomically writ…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 19, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2133451
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2133453
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2133455
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2218195
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2218212
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2245663
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2262241
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2265185
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2265271
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2265285
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2265649
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2267758
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2267799
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2272797
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273117
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273174
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273236
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273270
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273405
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273654
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2275690
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2275744
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2277166
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2277171
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278245
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278250
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278256
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278258
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278264
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278337
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278380
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281052
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281097
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281667
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281672
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281942
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282615
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282743