RHSA-2024:7005 — Red Hat Security Advisory: kernel-rt security update

Fixed packages 32

Release	Package	Fixed in
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-core	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-debug	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-debug-core	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-debug-debuginfo	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-debug-devel	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-debug-kvm	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-debug-modules	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-debug-modules-core	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-debug-modules-extra	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-debuginfo	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-debuginfo-common-x86_64	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-devel	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-kvm	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-modules	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-modules-core	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv	kernel-rt-modules-extra	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-core	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-debug	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-debug-core	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-debug-debuginfo	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-debug-devel	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-debug-modules	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-debug-modules-core	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-debug-modules-extra	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-debuginfo	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-debuginfo-common-x86_64	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-devel	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-modules	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-modules-core	0:5.14.0-284.85.1.rt14.370.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime	kernel-rt-modules-extra	0:5.14.0-284.85.1.rt14.370.el9_2

Vulnerabilities 3

Unscored —

CVE-2024-36899

gpiolib: cdev: Fix use after free in lineinfo_changed_notify

In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-after-free issue occurs as follows: when the GPIO chip device file is being closed by invoking gpio_chrdev_release(), watc…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

May 30, 2024
Unscored —

CVE-2024-41071 Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

Jul 29, 2024
Unscored —

CVE-2024-42139

ice: Fix improper extts handling

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper extts handling Extts events are disabled and enabled by the application ts2phc. However, in case where the driver is removed when the application is running, a specific extt…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Jul 30, 2024

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2284549
report
https://bugzilla.redhat.com/show_bug.cgi?id=2300448
report
https://bugzilla.redhat.com/show_bug.cgi?id=2301504
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7005.json
report
https://access.redhat.com/security/cve/CVE-2024-36899
advisory
https://www.cve.org/CVERecord?id=CVE-2024-36899
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-36899
article
https://lore.kernel.org/linux-cve-announce/2024053035-CVE-2024-36899-bfb1@gregkh/T
report
https://access.redhat.com/security/cve/CVE-2024-41071
advisory
https://www.cve.org/CVERecord?id=CVE-2024-41071
report
https://access.redhat.com/security/cve/CVE-2024-42139
advisory
https://www.cve.org/CVERecord?id=CVE-2024-42139
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-42139
article
https://lore.kernel.org/linux-cve-announce/2024073030-CVE-2024-42139-f8ef@gregkh/T

Red Hat Security Advisory: kernel-rt security update

Fixed packages 32

Vulnerabilities 3

gpiolib: cdev: Fix use after free in lineinfo_changed_notify

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

ice: Fix improper extts handling

References