Skip to content
OpenAdvisories
High RHSA-2024:6745 12 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Sep 28, 2024 · Updated Aug 20, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-core 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-core 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-debuginfo 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-devel 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-kvm 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-modules 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-modules-core 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-modules-extra 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debuginfo 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-devel 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-kvm 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-modules 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-modules-core 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-modules-extra 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-core 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-core 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-debuginfo 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-devel 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-modules 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-modules-core 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-modules-extra 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debuginfo 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-devel 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-modules 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-modules-core 0:5.14.0-284.84.1.rt14.369.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-modules-extra 0:5.14.0-284.84.1.rt14.369.el9_2

Vulnerabilities 12

  • High 7.8
    CVE-2023-52880

    tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc

    In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a GSM network anyway. Require initial nam…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26974

    crypto: qat - resolve race condition during AER recovery

    In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER system's error recovery process, the kernel driver may encounter a race condition with freeing the reset_data struc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-40984

    ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."

    In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Undo the modifications made in commit d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-38573

    cppc_cpufreq: Fix possible null pointer dereference

    In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from different places with various parameters. So cpufreq_cpu_get() …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.5
    CVE-2024-26886

    Bluetooth: af_bluetooth: Fix deadlock

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: af_bluetooth: Fix deadlock Attemting to do sock_lock on .recvmsg may cause a deadlock as shown bellow, so instead of using sock_sock this uses sk_receive_queue.lock on bt_sock_ioct…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 4.4
    CVE-2024-38559

    scsi: qedf: Ensure the copied buf is NUL terminated

    In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel buffer and copy count from userspace to that buffer. Later, we use kstrtouint on this buffer bu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-38615

    cpufreq: exit() callback is optional

    In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit() callback is optional The exit() callback is optional and shouldn't be called without checking a valid pointer first. Also, we must clear freq_table pointer even if the exit() …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-41023

    sched/deadline: Fix task_struct reference leak

    In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix task_struct reference leak During the execution of the following stress test with linux-rt: stress-ng --cyclic 30 --timeout 30 --minimize --quiet kmemleak frequently repor…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-41031

    mm/filemap: skip to create PMD-sized page cache if needed

    In the Linux kernel, the following vulnerability has been resolved: mm/filemap: skip to create PMD-sized page cache if needed On ARM64, HPAGE_PMD_ORDER is 13 when the base page size is 64KB. The PMD-sized page cache can't be supported by xarray as the followi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-42241

    mm/shmem: disable PMD-sized page cache if needed

    In the Linux kernel, the following vulnerability has been resolved: mm/shmem: disable PMD-sized page cache if needed For shmem files, it's possible that PMD-sized page cache can't be supported by xarray. For example, 512MB page cache on ARM64 when the base pa…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42243

    mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

    In the Linux kernel, the following vulnerability has been resolved: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2. Currently, xarray can't support arbitrary page cach…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-42246

    net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket

    In the Linux kernel, the following vulnerability has been resolved: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket When using a BPF program on kernel_connect(), the call can return -EPERM. This causes xs_tcp_setup_socket() to lo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2275678
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278354
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2283468
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2293348
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2293420
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2293440
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297568
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300381
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300395
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6745.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-52880
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-52880
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-52880
  • article
    https://lore.kernel.org/linux-cve-announce/2024052422-CVE-2023-52880-d2ff@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-26886
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26886
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26886
  • article
    https://lore.kernel.org/linux-cve-announce/2024041742-CVE-2024-26886-6345@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-26974
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26974
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26974
  • article
    https://lore.kernel.org/linux-cve-announce/2024050132-CVE-2024-26974-13eb@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-38559
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-38559
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-38559
  • article
    https://lore.kernel.org/linux-cve-announce/2024061953-CVE-2024-38559-3e03@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-38573
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-38573
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-38573
  • article
    https://lore.kernel.org/linux-cve-announce/2024061957-CVE-2024-38573-d4b6@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-38615
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-38615
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-38615
  • article
    https://lore.kernel.org/linux-cve-announce/2024061922-CVE-2024-38615-0d4c@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-40984
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-40984
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-40984
  • article
    https://lore.kernel.org/linux-cve-announce/2024071201-CVE-2024-40984-66b2@gregkh/T