Skip to content
OpenAdvisories
High RHSA-2024:8613 16 CVEs

Red Hat Security Advisory: kernel security update

Published Oct 30, 2024 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 85

ReleasePackageFixed in
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream bpftool-debuginfo 0:7.0.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-64k-debug-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-64k-debug-devel 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-64k-debug-devel-matched 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-64k-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-64k-devel 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-64k-devel-matched 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-debug-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-debug-devel 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-debug-devel-matched 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-debuginfo-common-aarch64 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-debuginfo-common-ppc64le 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-debuginfo-common-s390x 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-debuginfo-common-x86_64 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-devel 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-devel-matched 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-doc 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-tools-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-zfcpdump-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-zfcpdump-devel 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream kernel-zfcpdump-devel-matched 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream perf 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream perf-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream python3-perf-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream rtla 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos bpftool 0:7.0.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos bpftool-debuginfo 0:7.0.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-64k 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-64k-core 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-64k-debug 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-64k-debug-core 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-64k-debug-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-64k-debug-modules 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-64k-debug-modules-core 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-64k-debug-modules-extra 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-64k-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-64k-modules 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-64k-modules-core 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-64k-modules-extra 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-abi-stablelists 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-core 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-debug 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-debug-core 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-debug-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-debug-modules 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-debug-modules-core 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-debug-modules-extra 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-debug-uki-virt 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-debuginfo-common-aarch64 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-debuginfo-common-ppc64le 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-debuginfo-common-s390x 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-debuginfo-common-x86_64 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-modules 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-modules-core 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-modules-extra 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-tools 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-tools-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-tools-libs 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-uki-virt 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-zfcpdump 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-zfcpdump-core 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-zfcpdump-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-zfcpdump-modules 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-zfcpdump-modules-core 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos kernel-zfcpdump-modules-extra 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos perf-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos python3-perf 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos python3-perf-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb bpftool-debuginfo 0:7.0.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb kernel-64k-debug-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb kernel-64k-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb kernel-debug-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb kernel-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb kernel-debuginfo-common-aarch64 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb kernel-debuginfo-common-ppc64le 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb kernel-debuginfo-common-s390x 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb kernel-debuginfo-common-x86_64 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb kernel-tools-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb kernel-tools-libs-devel 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb kernel-zfcpdump-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb perf-debuginfo 0:5.14.0-284.90.1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::crb python3-perf-debuginfo 0:5.14.0-284.90.1.el9_2

Vulnerabilities 16

  • High 7.8
    CVE-2023-1252

    A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations s…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-41049

    filelock: fix potential use-after-free in posix_lock_inode

    In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free in posix_lock_inode Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode(). The request pointer had been changed earlier to point to a loc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-41064

    powerpc/eeh: avoid possible crash when edev->pdev changes

    In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: avoid possible crash when edev->pdev changes If a PCI device is removed during eeh_pe_report_edev(), edev->pdev will change and can cause a crash, hold the PCI rescan/remove lock…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-26826

    mptcp: fix data re-injection from stale subflow

    In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data re-injection from stale subflow When the MPTCP PM detects that a subflow is stale, all the packet scheduler must re-inject all the mptcp-level unacked data. To avoid acquiring…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-42152

    nvmet: fix a possible leak when destroy a ctrl during qp establishment

    In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a possible leak when destroy a ctrl during qp establishment In nvmet_sq_destroy we capture sq->ctrl early and if it is non-NULL we know that a ctrl was allocated (in the admin conn…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2024-26961

    mac802154: fix llsec key resources release in mac802154_llsec_key_del

    In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key_del() can free resources of a key directly without following the RCU rules for waiting before the end…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2021-47384

    hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field

    In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field If driver read tmp value sufficient for (tmp & 0x08) && (!(tmp & 0x80)) && ((tmp & 0x7) == ((tmp >> 4) & 0…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.7
    CVE-2024-2201

    CVE-2024-2201

    A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.

    Xen Xen linux-raspi2 linux-hwe Virtualization Debian Ubuntu Alpine
  • Unscored —
    CVE-2022-50720

    x86/apic: Don't disable x2APIC if locked

    In the Linux kernel, the following vulnerability has been resolved: x86/apic: Don't disable x2APIC if locked The APIC supports two modes, legacy APIC (or xAPIC), and Extended APIC (or x2APIC). X2APIC mode is mostly compatible with legacy APIC, but it disables…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52489

    mm/sparsemem: fix race in accessing memory_section->usage

    In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section->usage The below race is observed on a PFN which falls into the device memory region with the system memory configuration where PFN's are su…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26671

    blk-mq: fix IO hang from sbitmap wakeup race

    In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix IO hang from sbitmap wakeup race In blk_mq_mark_tag_wait(), __add_wait_queue() may be re-ordered with the following blk_mq_get_driver_tag() in case of getting driver tag failure. …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-26686

    fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

    In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task_sighand() can trigger a hard lockup. If NR_CPUS threads call do_task_stat() at the same time and the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-36889

    mptcp: ensure snd_nxt is properly initialized on connect

    In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_nxt is properly initialized on connect Christoph reported a splat hinting at a corrupted snd_una: WARNING: CPU: 1 PID: 38 at net/mptcp/protocol.c:1005 __mptcp_clean_una+0x4b…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-40960

    ipv6: prevent possible NULL dereference in rt6_probe()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6_probe() syzbot caught a NULL dereference in rt6_probe() [1] Bail out if __in6_dev_get() returns NULL. [1] Oops: general protection fault, probab…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-40998

    ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() In the following concurrency we will access the uninitialized rs->lock: ext4_fill_super ext4_register_sysfs // sysf…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-41055

    mm: prevent derefencing NULL ptr in pfn_section_valid()

    In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in accessing memory_section->usage") changed pfn_section_valid() to add a READ_ONCE() call…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2176140
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2268118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2269189
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2272811
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2273109
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2275604
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278176
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2282356
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2284571
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297544
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297582
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300439
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2301519
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8613.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-47384
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-47384
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-47384
  • article
    https://lore.kernel.org/linux-cve-announce/2024052144-CVE-2021-47384-f311@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-50720
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2425047
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50720
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50720
  • article
    https://lore.kernel.org/linux-cve-announce/2025122417-CVE-2022-50720-0297@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-1252
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-1252
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-1252
  • article
    https://lore.kernel.org/lkml/20211115165433.449951285@linuxfoundation.org/
  • report
    https://access.redhat.com/security/cve/CVE-2023-52489
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-52489
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-52489
  • article
    https://lore.kernel.org/linux-cve-announce/20240229155245.1571576-30-lee@kernel.org/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-2201
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-2201
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-2201
  • article
    https://download.vusec.net/papers/inspectre_sec24.pdf
  • article
    https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/branch-history-injection.html#inpage-nav-8