Red Hat Security Advisory: kernel security update

Fixed packages 81

Vulnerabilities 4

• Critical 9.8
  CVE-2024-35884

  udp: do not accept non-tunnel GSO skbs landing in a tunnel

  In the Linux kernel, the following vulnerability has been resolved: udp: do not accept non-tunnel GSO skbs landing in a tunnel When rx-udp-gro-forwarding is enabled UDP packets might be GROed when being forwarded. If such packets might land in a tunnel this c…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024
• High 8.8
  CVE-2024-26598

  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a potential UAF scenario in the case of an LPI translation cache hit racing with an operation that invalidates the …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 23, 2024
• High 8.4
  CVE-2024-26830

  i40e: Do not allow untrusted VF to remove administratively set MAC

  In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Currently when PF administratively sets VF's MAC address and the VF is put down (VF tries to delete all MACs) then the MAC i…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 17, 2024
• Unscored —
  CVE-2021-47560

  mlxsw: spectrum: Protect driver from buggy firmware

  In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Protect driver from buggy firmware When processing port up/down events generated by the device's firmware, the driver protects itself from events reported for non-existent lo…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 24, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2265801
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2275596
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281704
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2283389
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8161.json
• report
  https://access.redhat.com/security/cve/CVE-2021-47560
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-47560
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-47560
• article
  https://lore.kernel.org/linux-cve-announce/2024052451-CVE-2021-47560-4a52@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26598
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26598
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26598
• article
  https://lore.kernel.org/linux-cve-announce/2024022338-CVE-2024-26598-24f4@gregkh/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2024-26830
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26830
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26830
• article
  https://lore.kernel.org/linux-cve-announce/2024041703-CVE-2024-26830-5bc0@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-35884
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35884
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35884
• article
  https://lore.kernel.org/linux-cve-announce/2024051946-CVE-2024-35884-d4a4@gregkh/T