Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2024:5256 15 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Oct 1, 2024 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-core 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug-core 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug-debuginfo 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug-devel 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug-kvm 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug-modules 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug-modules-extra 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debuginfo 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debuginfo-common-x86_64 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-devel 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-kvm 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-modules 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-modules-extra 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-core 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debug 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debug-core 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debug-debuginfo 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debug-devel 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debug-modules 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debug-modules-extra 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debuginfo 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debuginfo-common-x86_64 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-devel 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-modules 0:5.14.0-70.112.1.rt21.184.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-modules-extra 0:5.14.0-70.112.1.rt21.184.el9_0

Vulnerabilities 15

  • High 7.8
    CVE-2024-36971 Exploited Public exploit

    net: fix __dst_negative_advice() race

    In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Aug 7, 2024
  • Critical 9.8
    CVE-2024-36886 Public exploit

    tipc: fix UAF in error path

    In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative reported a UAF in the tipc_buf_append() error path: BUG: KASAN: slab-use-after-free in kfree_skb_list…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2024-41090

    tap: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path, which could cause a corrupted skb to be…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2024-41091

    tun: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which could cause a corrupted skb to be sent…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26642

    netfilter: nf_tables: disallow anonymous set with timeout flag

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26808

    netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain Remove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER event is reported, otherwise a stale re…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-27397

    netfilter: nf_tables: use timestamp to check for set element timeout

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use timestamp to check for set element timeout Add a timestamp field at the beginning of the transaction, store it in the nftables per-netns area. Update set backend .in…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-27403

    netfilter: nft_flow_offload: reset dst in route object after setting up flow

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-35897

    netfilter: nf_tables: discard table flag update with pending basechain deletion

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: discard table flag update with pending basechain deletion Hook unregistration is deferred to the commit phase, same occurs with hook updates triggered by the table dorma…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-39502

    ionic: fix use after netif_napi_del()

    In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues are started, netif_napi_add() and napi_enable() are called. If there are 4 queues and only 3 queues are used for the current configuration, o…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-21823

    Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generatio…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • High 7.0
    CVE-2024-35898

    netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregister_flowtable_type() within nf_flow_inet_module_exit() can concurrent with __nft_flowtable_type_get() wi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-47624

    net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change

    In the Linux kernel, the following vulnerability has been resolved: net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change The refcount leak issues take place in an error handling path. When the 3rd argument buf doesn't match with "offline", "on…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26993

    fs: sysfs: Fix reference leak in sysfs_break_active_protection()

    In the Linux kernel, the following vulnerability has been resolved: fs: sysfs: Fix reference leak in sysfs_break_active_protection() The sysfs_break_active_protection() routine has an obvious reference leak in its error path. If the call to kernfs_find_and_ge…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-40978

    scsi: qedi: Fix crash while reading debugfs attribute

    In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedi_dbg_do_not_recover_cmd_read() function invokes sprintf() directly on a __user pointer, which results into the crash. To fix this…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2270881
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2273405
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2277238
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278314
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278989
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2280434
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2281127
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2281669
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2281672
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2292331
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297474
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297562
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298108
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2299240
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2299336
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5256.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-47624
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-47624
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-47624
  • article
    https://lore.kernel.org/linux-cve-announce/2024071646-CVE-2021-47624-86cd@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-21823
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-21823
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-21823
  • report
    https://access.redhat.com/security/cve/CVE-2024-26642
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26642
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26642
  • article
    https://lore.kernel.org/linux-cve-announce/2024032150-CVE-2024-26642-3549@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-26808
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26808
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26808
  • article
    https://lore.kernel.org/linux-cve-announce/2024040458-CVE-2024-26808-2df2@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-26993
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26993
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26993
  • article
    https://lore.kernel.org/linux-cve-announce/2024050144-CVE-2024-26993-fe52@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-27397
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-27397
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-27397