Red Hat Security Advisory: kernel-rt security update

Fixed packages 11

Vulnerabilities 2

• Medium 4.7
  CVE-2024-2201

  CVE-2024-2201

  A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.

  Xen Xen linux-raspi2 linux-hwe Virtualization Debian Ubuntu Alpine
  Dec 19, 2024
• Unscored —
  CVE-2024-41071 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Jul 29, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2268118
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2300448
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6995.json
• report
  https://access.redhat.com/security/cve/CVE-2024-2201
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-2201
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-2201
• article
  https://download.vusec.net/papers/inspectre_sec24.pdf
• article
  https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/branch-history-injection.html#inpage-nav-8
• article
  https://www.openwall.com/lists/oss-security/2024/04/09/15
• article
  https://www.vusec.net/projects/native-bhi/
• report
  https://access.redhat.com/security/cve/CVE-2024-41071
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-41071