Skip to content
OpenAdvisories
High RHSA-2024:6990 11 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Oct 1, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-core 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug-core 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug-debuginfo 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug-devel 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug-kvm 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug-modules 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debug-modules-extra 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debuginfo 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-debuginfo-common-x86_64 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-devel 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-kvm 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-modules 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::nfv kernel-rt-modules-extra 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-core 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debug 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debug-core 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debug-debuginfo 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debug-devel 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debug-modules 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debug-modules-extra 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debuginfo 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-debuginfo-common-x86_64 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-devel 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-modules 0:5.14.0-70.117.1.rt21.189.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::realtime kernel-rt-modules-extra 0:5.14.0-70.117.1.rt21.189.el9_0

Vulnerabilities 11

  • High 7.8
    CVE-2022-48786

    vsock: remove vsock from connected table when connect is interrupted by a signal

    In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsock_connect() expects that the socket could already be in the TCP_ESTABLISHED state when the connecting task…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2022-48816

    SUNRPC: lock against ->sock changing during sysfs read

    In the Linux kernel, the following vulnerability has been resolved: SUNRPC: lock against ->sock changing during sysfs read ->sock can be set to NULL asynchronously unless ->recv_mutex is held. So it is important to hold that mutex. Otherwise a sysfs read can …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-40984

    ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."

    In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Undo the modifications made in commit d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2021-47559

    net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()

    In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() Coverity reports a possible NULL dereferencing problem: in smc_vlan_by_tcpsk(): 6. returned_null: netdev_lower_get_next returns …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-47393

    hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs

    In the Linux kernel, the following vulnerability has been resolved: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs Fan speed minimum can be enforced from sysfs. For example, setting current fan speed to 20 is used to e…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-48773

    xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create

    In the Linux kernel, the following vulnerability has been resolved: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create If there are failures then we must not leave the non-NULL pointers with the error value, otherwise `rpcrdma_ep_destroy` gets c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-48799

    perf: Fix list corruption in perf_cgroup_switch()

    In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_cpuctx_list. This happens on the following path: perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list) cp…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52489

    mm/sparsemem: fix race in accessing memory_section->usage

    In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section->usage The below race is observed on a PFN which falls into the device memory region with the system memory configuration where PFN's are su…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-40995

    net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()

    In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() syzbot found hanging tasks waiting on rtnl_lock [1] A reproducer is available in the syzbot bug. When a request to add …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-41055

    mm: prevent derefencing NULL ptr in pfn_section_valid()

    In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in accessing memory_section->usage") changed pfn_section_valid() to add a READ_ONCE() call…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-41071 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2269189
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2282345
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2283390
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297568
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297579
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298109
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298122
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298135
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298155
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300448
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6990.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-47393
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-47393
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-47393
  • article
    https://lore.kernel.org/linux-cve-announce/2024052147-CVE-2021-47393-ea1c@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2021-47559
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-47559
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-47559
  • article
    https://lore.kernel.org/linux-cve-announce/2024052450-CVE-2021-47559-9909@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-48773
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-48773
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-48773
  • article
    https://lore.kernel.org/linux-cve-announce/2024071628-CVE-2022-48773-9563@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-48786
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-48786
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-48786
  • article
    https://lore.kernel.org/linux-cve-announce/2024071637-CVE-2022-48786-7416@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-48799
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-48799
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-48799
  • article
    https://lore.kernel.org/linux-cve-announce/2024071643-CVE-2022-48799-9594@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-48816
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-48816
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-48816
  • article
    https://lore.kernel.org/linux-cve-announce/2024071648-CVE-2022-48816-e2a3@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-52489
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-52489