Red Hat Security Advisory: kernel-rt security update

Fixed packages 28

Vulnerabilities 6

• High 7.8
  CVE-2024-36971 Exploited Public exploit

  net: fix __dst_negative_advice() race

  In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first c…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 10, 2024

  KEV Aug 7, 2024
• Critical 9.1
  CVE-2022-48828

  NFSD: Fix ia_size underflow

  In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix ia_size underflow iattr::ia_size is a loff_t, which is a signed 64-bit type. NFSv3 and NFSv4 both define file size as an unsigned 64-bit type. Thus there is a range of valid file si…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 16, 2024
• Critical 9.1
  CVE-2022-48829

  NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes

  In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes iattr::ia_size is a loff_t, so these NFSv3 procedures must be careful to deal with incoming client size values that are larger th…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 16, 2024
• High 7.8
  CVE-2024-39502

  ionic: fix use after netif_napi_del()

  In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues are started, netif_napi_add() and napi_enable() are called. If there are 4 queues and only 3 queues are used for the current configuration, o…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 12, 2024
• High 7.5
  CVE-2022-48827

  NFSD: Fix the behavior of READ near OFFSET_MAX

  In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSET_MAX Dan Aloni reports: > Due to commit 8cfb9015280d ("NFS: Always provide aligned buffers to > the RPC read layers") on the client, a read of 0xfff …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 16, 2024
• Unscored —
  CVE-2024-36005

  netfilter: nf_tables: honor table dormant flag from netdev release event path

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: honor table dormant flag from netdev release event path Check for table dormant flag otherwise netdev release event path tries to unregister an already unregistered hook…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 20, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281949
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2292331
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2297474
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298166
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298167
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298168
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5282.json
• report
  https://access.redhat.com/security/cve/CVE-2022-48827
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-48827
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-48827
• article
  https://lore.kernel.org/linux-cve-announce/2024071652-CVE-2022-48827-f95b@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-48828
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-48828
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-48828
• article
  https://lore.kernel.org/linux-cve-announce/2024071652-CVE-2022-48828-97cb@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-48829
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-48829
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-48829
• article
  https://lore.kernel.org/linux-cve-announce/2024071652-CVE-2022-48829-2145@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-36005
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-36005
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-36005
• article
  https://lore.kernel.org/linux-cve-announce/2024052024-CVE-2024-36005-2336@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-36971
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-36971
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-36971
• article
  https://lore.kernel.org/linux-cve-announce/20240610090330.1347021-2-lee@kernel.org/T
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2024-39502
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-39502
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-39502
• article
  https://lore.kernel.org/linux-cve-announce/2024071204-CVE-2024-39502-afe9@gregkh/T