Red Hat Security Advisory: kernel security update

Fixed packages 47

Vulnerabilities 12

• High 7.8
  CVE-2022-48786

  vsock: remove vsock from connected table when connect is interrupted by a signal

  In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsock_connect() expects that the socket could already be in the TCP_ESTABLISHED state when the connecting task…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 16, 2024
• High 7.8
  CVE-2022-48816

  SUNRPC: lock against ->sock changing during sysfs read

  In the Linux kernel, the following vulnerability has been resolved: SUNRPC: lock against ->sock changing during sysfs read ->sock can be set to NULL asynchronously unless ->recv_mutex is held. So it is important to hold that mutex. Otherwise a sysfs read can …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 16, 2024
• High 7.8
  CVE-2024-40984

  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."

  In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Undo the modifications made in commit d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel i…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 12, 2024
• High 7.5
  CVE-2021-47559

  net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()

  In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() Coverity reports a possible NULL dereferencing problem: in smc_vlan_by_tcpsk(): 6. returned_null: netdev_lower_get_next returns …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 24, 2024
• Unscored —
  CVE-2021-47393

  hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs

  In the Linux kernel, the following vulnerability has been resolved: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs Fan speed minimum can be enforced from sysfs. For example, setting current fan speed to 20 is used to e…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• Unscored —
  CVE-2021-47623

  powerpc/fixmap: Fix VM debug warning on unmap

  In the Linux kernel, the following vulnerability has been resolved: powerpc/fixmap: Fix VM debug warning on unmap Unmapping a fixmap entry is done by calling __set_fixmap() with FIXMAP_PAGE_CLEAR as flags. Today, powerpc __set_fixmap() calls map_kernel_page()…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 16, 2024
• Unscored —
  CVE-2022-48773

  xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create

  In the Linux kernel, the following vulnerability has been resolved: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create If there are failures then we must not leave the non-NULL pointers with the error value, otherwise `rpcrdma_ep_destroy` gets c…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 16, 2024
• Unscored —
  CVE-2022-48799

  perf: Fix list corruption in perf_cgroup_switch()

  In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_cpuctx_list. This happens on the following path: perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list) cp…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 16, 2024
• Unscored —
  CVE-2023-52489

  mm/sparsemem: fix race in accessing memory_section->usage

  In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section->usage The below race is observed on a PFN which falls into the device memory region with the system memory configuration where PFN's are su…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 29, 2024
• Unscored —
  CVE-2024-40995

  net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()

  In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() syzbot found hanging tasks waiting on rtnl_lock [1] A reproducer is available in the syzbot bug. When a request to add …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 12, 2024
• Unscored —
  CVE-2024-41055

  mm: prevent derefencing NULL ptr in pfn_section_valid()

  In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in accessing memory_section->usage") changed pfn_section_valid() to add a READ_ONCE() call…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 29, 2024
• Unscored —
  CVE-2024-41071 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Jul 29, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2269189
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282345
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2283390
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2297568
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2297579
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298107
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298109
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298122
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298135
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298155
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2300429
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2300448
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6991.json
• report
  https://access.redhat.com/security/cve/CVE-2021-47393
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-47393
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-47393
• article
  https://lore.kernel.org/linux-cve-announce/2024052147-CVE-2021-47393-ea1c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2021-47559
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-47559
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-47559
• article
  https://lore.kernel.org/linux-cve-announce/2024052450-CVE-2021-47559-9909@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2021-47623
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-47623
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-47623
• article
  https://lore.kernel.org/linux-cve-announce/2024071645-CVE-2021-47623-407f@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-48773
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-48773
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-48773
• article
  https://lore.kernel.org/linux-cve-announce/2024071628-CVE-2022-48773-9563@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-48786
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-48786
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-48786
• article
  https://lore.kernel.org/linux-cve-announce/2024071637-CVE-2022-48786-7416@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-48799
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-48799
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-48799
• article
  https://lore.kernel.org/linux-cve-announce/2024071643-CVE-2022-48799-9594@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-48816