Red Hat Security Advisory: kernel security update

Fixed packages 81

Vulnerabilities 10

• High 8.4
  CVE-2021-47352

  virtio-net: Add validation for used length

  In the Linux kernel, the following vulnerability has been resolved: virtio-net: Add validation for used length This adds validation for used length (might come from an untrusted device) to avoid data corruption or loss.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• High 7.8
  CVE-2021-47492

  mm, thp: bail out early in collapse_file for writeback page

  In the Linux kernel, the following vulnerability has been resolved: mm, thp: bail out early in collapse_file for writeback page Currently collapse_file does not explicitly check PG_writeback, instead, page_has_private and try_to_release_page are used to filte…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 22, 2024
• High 7.8
  CVE-2024-26704

  ext4: fix double-free of blocks due to wrong extents moved_len

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix double-free of blocks due to wrong extents moved_len In ext4_move_extents(), moved_len is only updated when all moves are successfully executed, and only discards orig_inode and don…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 3, 2024
• High 7.8
  CVE-2024-26772

  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()

  In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() Places the logic for checking if the group's block bitmap is corrupt under the protection of the group lock to avo…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 3, 2024
• High 7.8
  CVE-2024-26773

  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()

  In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() Determine if the group block bitmap is corrupted before using ac_b_ex in ext4_mb_try_best_found() to avoid alloc…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 3, 2024
• High 7.8
  CVE-2024-27019

  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() nft_unregister_obj() can concurrent with __nft_obj_type_get(), and there is not any protection when iterate over nf_table…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2024
• High 7.8
  CVE-2024-27020

  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() nft_unregister_expr() can concurrent with __nft_expr_type_get(), and there is not any protection when iterate over nf_ta…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2024
• High 7.8
  CVE-2024-41009

  bpf: Fix overrunning reservations in ringbuf

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf The BPF ring buffer internally is implemented as a power-of-2 sized circular buffer, with two logical and ever-increasing counters: consumer_pos i…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 17, 2024
• High 7.0
  CVE-2024-35898

  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregister_flowtable_type() within nf_flow_inet_module_exit() can concurrent with __nft_flowtable_type_get() wi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024
• Unscored —
  CVE-2022-48687

  ipv6: sr: fix out-of-bounds read when setting HMAC data.

  In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC data. The SRv6 layer allows defining HMAC data that can later be used to sign IPv6 Segment Routing Headers. This configuration is realised v…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 3, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273174
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273236
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273242
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278256
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278258
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278930
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281669
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282401
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282924
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298412
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6753.json
• report
  https://access.redhat.com/security/cve/CVE-2021-47352
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-47352
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-47352
• article
  https://lore.kernel.org/linux-cve-announce/2024052141-CVE-2021-47352-df50@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2021-47492
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-47492
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-47492
• article
  https://lore.kernel.org/linux-cve-announce/2024052241-CVE-2021-47492-ee88@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-48687
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-48687
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-48687
• article
  https://lore.kernel.org/linux-cve-announce/2024050344-CVE-2022-48687-b82e@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26704
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26704
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26704
• article
  https://lore.kernel.org/linux-cve-announce/2024040340-CVE-2024-26704-a082@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26772
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26772
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26772
• article
  https://lore.kernel.org/linux-cve-announce/2024040308-CVE-2024-26772-5168@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26773
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26773
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26773
• article
  https://lore.kernel.org/linux-cve-announce/2024040308-CVE-2024-26773-a314@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-27019
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-27019
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-27019