Skip to content
OpenAdvisories
Critical RHSA-2024:6268 14 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Sep 27, 2024 · Updated Aug 20, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-core 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-core 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-debuginfo 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-devel 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-kvm 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-modules 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-modules-core 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-modules-extra 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debuginfo 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-devel 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-kvm 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-modules 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-modules-core 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-modules-extra 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-core 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-core 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-debuginfo 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-devel 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-modules 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-modules-core 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-modules-extra 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debuginfo 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-devel 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-modules 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-modules-core 0:5.14.0-284.82.1.rt14.367.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-modules-extra 0:5.14.0-284.82.1.rt14.367.el9_2

Vulnerabilities 14

  • Critical 9.8
    CVE-2024-38570

    gfs2: Fix potential glock use-after-free on unmount

    In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2024-40983

    tipc: force a dst refcount before doing decryption

    In the Linux kernel, the following vulnerability has been resolved: tipc: force a dst refcount before doing decryption As it says in commit 3bc07321ccc2 ("xfrm: Force a dst refcount before entering the xfrm type handlers"): "Crypto requests might return async…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.4
    CVE-2024-35875

    x86/coco: Require seeding RNG with RDRAND on CoCo systems

    In the Linux kernel, the following vulnerability has been resolved: x86/coco: Require seeding RNG with RDRAND on CoCo systems There are few uses of CoCo that don't rely on working cryptography and hence a working RNG. Unfortunately, the CoCo threat model mean…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-35839

    netfilter: bridge: replace physindev with physinif in nf_bridge_info

    In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: replace physindev with physinif in nf_bridge_info An skb can be added to a neigh->arp_queue while waiting for an arp reply. Where original skb's skb->dev can be different t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-39502

    ionic: fix use after netif_napi_del()

    In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues are started, netif_napi_add() and napi_enable() are called. If there are 4 queues and only 3 queues are used for the current configuration, o…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-40956

    dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list Use list_for_each_entry_safe() to allow iterating through the list and deleting the entry in the iteration process. The d…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.4
    CVE-2024-38540

    bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq

    In the Linux kernel, the following vulnerability has been resolved: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq Undefined behavior is triggered when bnxt_qplib_alloc_init_hwq is called with hwq_attr->aux_depth != 0 and hwq_attr->aux_s…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-26946

    kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address

    In the Linux kernel, the following vulnerability has been resolved: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address Read from an unsafe address with copy_from_kernel_nofault() in arch_adjust_kprobe_addr() because this function is used …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-35895

    bpf, sockmap: Prevent lock inversion deadlock in map delete elem

    In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using corpuses where a BPF tracing program deletes elements from a sockmap/sockhash map. Because BPF tracing…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-40914

    mm/huge_memory: don't unpoison huge_zero_folio

    In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: don't unpoison huge_zero_folio When I did memory failure tests recently, below panic occurs: kernel BUG at include/linux/mm.h:1135! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-40978

    scsi: qedi: Fix crash while reading debugfs attribute

    In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedi_dbg_do_not_recover_cmd_read() function invokes sprintf() directly on a __user pointer, which results into the crash. To fix this…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-41044

    ppp: reject claimed-as-LCP but actually malformed packets

    In the Linux kernel, the following vulnerability has been resolved: ppp: reject claimed-as-LCP but actually malformed packets Since 'ppp_async_encode()' assumes valid LCP packets (with code from 1 to 7 inclusive), add 'ppp_check_packet()' to ensure that LCP p…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-42102

    Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"

    In the Linux kernel, the following vulnerability has been resolved: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" Patch series "mm: Avoid possible overflows in dirty throttling". Dirty throttling logic assumes dirty limits in …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42131

    mm: avoid overflows in dirty throttling logic

    In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed with assumptions that dirty limits in PAGE_SIZE units fit into 32-bit (so that various multiplications…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278206
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2281284
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2281677
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2281727
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2293423
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2293459
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297474
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297498
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297540
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297562
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297567
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300414
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2301465
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2301496
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6268.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-26946
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26946
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26946
  • article
    https://lore.kernel.org/linux-cve-announce/2024050126-CVE-2024-26946-ad5d@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-35839
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-35839
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-35839
  • article
    https://lore.kernel.org/linux-cve-announce/2024051756-CVE-2024-35839-4194@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-35875
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-35875
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-35875
  • article
    https://lore.kernel.org/linux-cve-announce/2024051942-CVE-2024-35875-e23d@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-35895
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-35895
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-35895
  • article
    https://lore.kernel.org/linux-cve-announce/2024051950-CVE-2024-35895-cb33@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-38540
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-38540
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-38540
  • article
    https://lore.kernel.org/linux-cve-announce/2024061947-CVE-2024-38540-1d0a@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-38570
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-38570
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-38570