Red Hat Security Advisory: kernel security update

Fixed packages 47

Vulnerabilities 4

• High 8.1
  CVE-2024-46858

  mptcp: pm: Fix uaf in __timer_delete_sync

  In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in __timer_delete_sync There are two paths to access mptcp_pm_del_add_timer, result in a race condition: CPU1 CPU2 ==== ==== net_rx_action napi_poll netlink_sendmsg __napi_…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 27, 2024
• High 7.8
  CVE-2022-48796

  iommu: Fix potential use-after-free during probe

  In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential use-after-free during probe Kasan has reported the following use after free on dev->iommu. when a device probe fails and it is in process of freeing dev->iommu in dev_iom…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 16, 2024
• High 7.8
  CVE-2022-49270

  dm: fix use-after-free in dm_cleanup_zoned_dev()

  In the Linux kernel, the following vulnerability has been resolved: dm: fix use-after-free in dm_cleanup_zoned_dev() dm_cleanup_zoned_dev() uses queue, so it must be called before blk_cleanup_disk() starts its killing: blk_cleanup_disk->blk_cleanup_queue()->k…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 26, 2025
• Unscored —
  CVE-2024-26671

  blk-mq: fix IO hang from sbitmap wakeup race

  In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix IO hang from sbitmap wakeup race In blk_mq_mark_tag_wait(), __add_wait_queue() may be re-ordered with the following blk_mq_get_driver_tag() in case of getting driver tag failure. …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 2, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2272811
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298132
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2315210
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9942.json
• report
  https://access.redhat.com/security/cve/CVE-2022-48796
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-48796
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-48796
• article
  https://lore.kernel.org/linux-cve-announce/2024071642-CVE-2022-48796-8474@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-49270
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2348180
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-49270
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-49270
• article
  https://lore.kernel.org/linux-cve-announce/2025022630-CVE-2022-49270-c331@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26671
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26671
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26671
• article
  https://lore.kernel.org/linux-cve-announce/2024040219-CVE-2024-26671-2543@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-46858
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-46858
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-46858
• article
  https://lore.kernel.org/linux-cve-announce/2024092744-CVE-2024-46858-dab6@gregkh/T