Red Hat Security Advisory: kernel security update

Fixed packages 85

Vulnerabilities 11

• Critical 9.1
  CVE-2024-42284

  tipc: Return non-zero value from tipc_udp_addr2str() on error

  In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occ…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 17, 2024
• High 7.8
  CVE-2023-53354

  skbuff: skb_segment, Call zero copy functions before using skbuff frags

  In the Linux kernel, the following vulnerability has been resolved: skbuff: skb_segment, Call zero copy functions before using skbuff frags Commit bf5c25d60861 ("skbuff: in skb_segment, call zerocopy functions once per nskb") added the call to zero copy funct…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 17, 2025
• High 7.8
  CVE-2024-42272

  sched: act_ct: take care of padding in struct zones_ht_key

  In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increased lookup key size from 2 bytes to 16 bytes, because zones_ht_key got a struct net pointer. Make sure rhashtabl…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 17, 2024
• High 7.5
  CVE-2024-41066

  ibmvnic: Add tx check to prevent skb leak

  In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Add tx check to prevent skb leak Below is a summary of how the driver stores a reference to an skb during transmit: tx_buff[free_map[consumer_index]]->skb = new_skb; free_map[consume…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 29, 2024
• High 7.3
  CVE-2024-39472

  xfs: fix log recovery buffer allocation for the legacy h_size fixup

  In the Linux kernel, the following vulnerability has been resolved: xfs: fix log recovery buffer allocation for the legacy h_size fixup Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values use…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 5, 2024
• High 7.3
  CVE-2024-41056

  firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files

  In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files Use strnlen() instead of strlen() on the algorithm and coefficient name string arrays in V1 wmfw files. In V1 wmfw files the na…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 29, 2024
• Medium 6.5
  CVE-2023-28746

  Information exposure through microarchitectural state after transient execution from some register files for some Intel…

  linux xen xen intel-microcode Debian Ubuntu Alpine
  Mar 14, 2024
• Unscored —
  CVE-2021-47385

  hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field

  In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• Unscored —
  CVE-2023-54251

  net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.

  In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX. syzkaller found zero division error [0] in div_s64_rem() called from get_cycle_time_elapsed(), where sched->cycle_time is…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 30, 2025
• Unscored —
  CVE-2024-36244

  net/sched: taprio: extend minimum interval restriction to entire cycle too

  In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: extend minimum interval restriction to entire cycle too It is possible for syzbot to side-step the restriction imposed by the blamed commit in the Fixes: tag, because the t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 21, 2024
• Unscored —
  CVE-2024-42090

  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER In create_pinctrl(), pinctrl_maps_mutex is acquired before calling add_setting(). If add_setting() returns -EPROBE_DEFER,…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 29, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270700
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282355
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2293654
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2296067
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2300430
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2300442
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2300552
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8157.json
• report
  https://access.redhat.com/security/cve/CVE-2021-47385
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-47385
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-47385
• article
  https://lore.kernel.org/linux-cve-announce/2024052144-CVE-2021-47385-a7e7@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-28746
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-28746
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-28746
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html
• report
  https://access.redhat.com/security/cve/CVE-2023-53354
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2396158
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53354
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53354
• article
  https://lore.kernel.org/linux-cve-announce/2025091721-CVE-2023-53354-771f@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-54251
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2426020
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-54251
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-54251
• article
  https://lore.kernel.org/linux-cve-announce/2025123054-CVE-2023-54251-2a3b@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-36244
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-36244
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-36244
• article
  https://lore.kernel.org/linux-cve-announce/2024062134-CVE-2024-36244-f88f@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-39472
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-39472
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-39472
• article
  https://lore.kernel.org/linux-cve-announce/2024070512-CVE-2024-39472-f977@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-41056
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-41056
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-41056
• article
  https://lore.kernel.org/linux-cve-announce/2024072930-CVE-2024-41056-c324@gregkh/T