Red Hat Security Advisory: kernel-rt security update

Fixed packages 28

Vulnerabilities 4

• High 8.8
  CVE-2024-41090

  tap: add missing verification for short frame

  In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path, which could cause a corrupted skb to be…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 29, 2024
• High 8.8
  CVE-2024-41091

  tun: add missing verification for short frame

  In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which could cause a corrupted skb to be sent…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 29, 2024
• Unscored —
  CVE-2022-48799

  perf: Fix list corruption in perf_cgroup_switch()

  In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_cpuctx_list. This happens on the following path: perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list) cp…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 16, 2024
• Unscored —
  CVE-2024-40995

  net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()

  In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() syzbot found hanging tasks waiting on rtnl_lock [1] A reproducer is available in the syzbot bug. When a request to add …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 12, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2297579
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298135
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2299240
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2299336
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6160.json
• report
  https://access.redhat.com/security/cve/CVE-2022-48799
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-48799
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-48799
• article
  https://lore.kernel.org/linux-cve-announce/2024071643-CVE-2022-48799-9594@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-40995
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-40995
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-40995
• article
  https://lore.kernel.org/linux-cve-announce/2024071251-CVE-2024-40995-2a5c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-41090
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-41090
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-41090
• article
  https://lore.kernel.org/linux-cve-announce/2024072916-CVE-2024-41090-9830@gregkh
• article
  https://www.openwall.com/lists/oss-security/2024/07/24/4
• report
  https://access.redhat.com/security/cve/CVE-2024-41091
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-41091
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-41091
• article
  https://lore.kernel.org/linux-cve-announce/2024072918-CVE-2024-41091-35b7@gregkh