Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 14

• Critical 9.1
  CVE-2024-42284

  tipc: Return non-zero value from tipc_udp_addr2str() on error

  In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occ…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 17, 2024
• High 7.8
  CVE-2024-27403

  netfilter: nft_flow_offload: reset dst in route object after setting up flow

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 17, 2024
• High 7.8
  CVE-2024-36978

  net: sched: sch_multiq: fix possible OOB write in multiq_tune()

  In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned to qopt->bands to execute subsequent code logic after kmalloc. So the old q->bands should not be used…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 19, 2024
• High 7.8
  CVE-2024-38556

  net/mlx5: Add a timeout to acquire the command queue semaphore

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Add a timeout to acquire the command queue semaphore Prevent forced completion handling on an entry that has not yet been assigned an index, causing an out of bounds access on idx =…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 19, 2024
• High 7.8
  CVE-2024-39502

  ionic: fix use after netif_napi_del()

  In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues are started, netif_napi_add() and napi_enable() are called. If there are 4 queues and only 3 queues are used for the current configuration, o…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 12, 2024
• High 7.8
  CVE-2024-42272

  sched: act_ct: take care of padding in struct zones_ht_key

  In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increased lookup key size from 2 bytes to 16 bytes, because zones_ht_key got a struct net pointer. Make sure rhashtabl…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 17, 2024
• High 7.1
  CVE-2024-39483

  KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked

  In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actually masked, i.e. if the vCPU is…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 5, 2024
• Medium 6.5
  CVE-2023-28746

  Information exposure through microarchitectural state after transient execution from some register files for some Intel…

  linux xen xen intel-microcode Debian Ubuntu Alpine
  Mar 14, 2024
• Medium 5.5
  CVE-2024-35989

  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms

  In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms During the removal of the idxd driver, registered offline callback is invoked as part of the clean up process. However, on syste…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 20, 2024
• Unscored —
  CVE-2021-47385

  hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field

  In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• Unscored —
  CVE-2023-52658

  Revert "net/mlx5: Block entering switchdev mode with ns inconsistency"

  In the Linux kernel, the following vulnerability has been resolved: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" This reverts commit 662404b24a4c4d839839ed25e3097571f5938b9b. The revert is required due to the suspicion it is not good…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 17, 2024
• Unscored —
  CVE-2024-36889

  mptcp: ensure snd_nxt is properly initialized on connect

  In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_nxt is properly initialized on connect Christoph reported a splat hinting at a corrupted snd_una: WARNING: CPU: 1 PID: 38 at net/mptcp/protocol.c:1005 __mptcp_clean_una+0x4b…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 30, 2024
• Unscored —
  CVE-2024-40959

  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()

  In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ip6_dst_idev() can return NULL, xfrm6_get_saddr() must act accordingly. syzbot reported: Oops: general protection fault, probably…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 12, 2024
• Unscored —
  CVE-2024-42079

  gfs2: Fix NULL pointer dereference in gfs2_log_flush

  In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2_log_flush In gfs2_jindex_free(), set sdp->sd_jdesc to NULL under the log flush lock to provide exclusion against gfs2_log_flush(). In gfs2_log_flush…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 29, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270700
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281127
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281149
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281847
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282355
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2284571
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2293078
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2293443
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2295921
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2297474
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2297543
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2300517
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8162.json
• report
  https://access.redhat.com/security/cve/CVE-2021-47385
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-47385
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-47385
• article
  https://lore.kernel.org/linux-cve-announce/2024052144-CVE-2021-47385-a7e7@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-28746
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-28746
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-28746
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html
• report
  https://access.redhat.com/security/cve/CVE-2023-52658
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52658
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52658
• article
  https://lore.kernel.org/linux-cve-announce/2024051717-CVE-2023-52658-4c61@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-27403
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-27403
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-27403
• article
  https://lore.kernel.org/linux-cve-announce/2024051738-CVE-2024-27403-c4ba@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-35989
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35989
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35989
• article
  https://lore.kernel.org/linux-cve-announce/2024052020-CVE-2024-35989-c5da@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-36889
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-36889
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-36889
• article
  https://lore.kernel.org/linux-cve-announce/2024053033-CVE-2024-36889-222d@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-36978