Red Hat Security Advisory: kernel security update

Fixed packages 143

Vulnerabilities 4

• High 7.8
  CVE-2024-46713

  perf/aux: Fix AUX buffer serialization

  In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to fully serialize it. Note that in the loc…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 13, 2024
• High 7.8
  CVE-2024-50208

  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages

  In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages Avoid memory corruption while setting up Level-2 PBL pages for the non MR resources when num_pages > 256K. There will be a single PD…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 8, 2024
• High 7.5
  CVE-2024-53122

  mptcp: cope racing subflow creation in mptcp_rcv_space_adjust

  In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 2, 2024
• Medium 5.5
  CVE-2024-50252

  mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address

  In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address The device stores IPv6 addresses that are used for encapsulation in linear memory that is managed by the driver. Changi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 9, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2312221
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2324611
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2324898
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2329932
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0059.json
• report
  https://access.redhat.com/security/cve/CVE-2024-46713
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-46713
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-46713
• article
  https://lore.kernel.org/linux-cve-announce/2024091316-CVE-2024-46713-5e49@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-50208
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-50208
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-50208
• article
  https://lore.kernel.org/linux-cve-announce/2024110806-CVE-2024-50208-08dc@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-50252
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-50252
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-50252
• article
  https://lore.kernel.org/linux-cve-announce/2024110937-CVE-2024-50252-aacc@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-53122
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-53122
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-53122
• article
  https://lore.kernel.org/linux-cve-announce/2024120252-CVE-2024-53122-f35c@gregkh/T