Skip to content
OpenAdvisories
High RHSA-2024:8614 14 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Oct 30, 2024 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-core 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-core 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-debuginfo 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-devel 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-kvm 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-modules 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-modules-core 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debug-modules-extra 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debuginfo 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-devel 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-kvm 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-modules 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-modules-core 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::nfv kernel-rt-modules-extra 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-core 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-core 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-debuginfo 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-devel 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-modules 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-modules-core 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debug-modules-extra 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debuginfo 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-devel 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-modules 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-modules-core 0:5.14.0-284.90.1.rt14.375.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::realtime kernel-rt-modules-extra 0:5.14.0-284.90.1.rt14.375.el9_2

Vulnerabilities 14

  • High 7.8
    CVE-2023-1252

    A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations s…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-41049

    filelock: fix potential use-after-free in posix_lock_inode

    In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free in posix_lock_inode Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode(). The request pointer had been changed earlier to point to a loc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-26826

    mptcp: fix data re-injection from stale subflow

    In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data re-injection from stale subflow When the MPTCP PM detects that a subflow is stale, all the packet scheduler must re-inject all the mptcp-level unacked data. To avoid acquiring…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-42152

    nvmet: fix a possible leak when destroy a ctrl during qp establishment

    In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a possible leak when destroy a ctrl during qp establishment In nvmet_sq_destroy we capture sq->ctrl early and if it is non-NULL we know that a ctrl was allocated (in the admin conn…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2024-26961

    mac802154: fix llsec key resources release in mac802154_llsec_key_del

    In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key_del() can free resources of a key directly without following the RCU rules for waiting before the end…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2021-47384

    hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field

    In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field If driver read tmp value sufficient for (tmp & 0x08) && (!(tmp & 0x80)) && ((tmp & 0x7) == ((tmp >> 4) & 0…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.7
    CVE-2024-2201

    CVE-2024-2201

    A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.

    Xen Xen linux-raspi2 linux-hwe Virtualization Debian Ubuntu Alpine
  • Unscored —
    CVE-2023-52489

    mm/sparsemem: fix race in accessing memory_section->usage

    In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section->usage The below race is observed on a PFN which falls into the device memory region with the system memory configuration where PFN's are su…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26671

    blk-mq: fix IO hang from sbitmap wakeup race

    In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix IO hang from sbitmap wakeup race In blk_mq_mark_tag_wait(), __add_wait_queue() may be re-ordered with the following blk_mq_get_driver_tag() in case of getting driver tag failure. …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-26686

    fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

    In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task_sighand() can trigger a hard lockup. If NR_CPUS threads call do_task_stat() at the same time and the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-36889

    mptcp: ensure snd_nxt is properly initialized on connect

    In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_nxt is properly initialized on connect Christoph reported a splat hinting at a corrupted snd_una: WARNING: CPU: 1 PID: 38 at net/mptcp/protocol.c:1005 __mptcp_clean_una+0x4b…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-40960

    ipv6: prevent possible NULL dereference in rt6_probe()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6_probe() syzbot caught a NULL dereference in rt6_probe() [1] Bail out if __in6_dev_get() returns NULL. [1] Oops: general protection fault, probab…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-40998

    ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() In the following concurrency we will access the uninitialized rs->lock: ext4_fill_super ext4_register_sysfs // sysf…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-41055

    mm: prevent derefencing NULL ptr in pfn_section_valid()

    In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in accessing memory_section->usage") changed pfn_section_valid() to add a READ_ONCE() call…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2176140
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2268118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2269189
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2272811
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2273109
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2275604
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278176
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2282356
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2284571
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297544
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2297582
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2300429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2301519
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8614.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-47384
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-47384
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-47384
  • article
    https://lore.kernel.org/linux-cve-announce/2024052144-CVE-2021-47384-f311@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-1252
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-1252
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-1252
  • article
    https://lore.kernel.org/lkml/20211115165433.449951285@linuxfoundation.org/
  • report
    https://access.redhat.com/security/cve/CVE-2023-52489
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-52489
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-52489
  • article
    https://lore.kernel.org/linux-cve-announce/20240229155245.1571576-30-lee@kernel.org/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-2201
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-2201
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-2201
  • article
    https://download.vusec.net/papers/inspectre_sec24.pdf
  • article
    https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/branch-history-injection.html#inpage-nav-8
  • article
    https://www.openwall.com/lists/oss-security/2024/04/09/15
  • article
    https://www.vusec.net/projects/native-bhi/
  • report
    https://access.redhat.com/security/cve/CVE-2024-26671
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26671
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26671
  • article
    https://lore.kernel.org/linux-cve-announce/2024040219-CVE-2024-26671-2543@gregkh/T