Red Hat Security Advisory: kernel security update

Fixed packages 143

Vulnerabilities 4

• Critical 9.8
  CVE-2024-50154

  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().

  In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). Martin KaFai Lau reported use-after-free [0] in reqsk_timer_handler(). """ We are seeing a use-after-free from a bpf prog attached…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 7, 2024
• Critical 9.8
  CVE-2024-57947

  netfilter: nf_set_pipapo: fix initial map fill

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the size of the first field, not the total field size. After each ro…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jan 23, 2025
• High 7.8
  CVE-2024-53088

  i40e: fix race condition by adding filter's intermediate sync state

  In the Linux kernel, the following vulnerability has been resolved: i40e: fix race condition by adding filter's intermediate sync state Fix a race condition in the i40e driver that leads to MAC/VLAN filters becoming corrupted and leaking. Address the issue th…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 19, 2024
• High 7.3
  CVE-2024-50275

  arm64/sve: Discard stale CPU state when handling SVE traps

  In the Linux kernel, the following vulnerability has been resolved: arm64/sve: Discard stale CPU state when handling SVE traps The logic for handling SVE traps manipulates saved FPSIMD/SVE state incorrectly, and a race with preemption can result in a task hav…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 19, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2324313
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2327198
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2327328
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0578.json
• report
  https://access.redhat.com/security/cve/CVE-2024-50154
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-50154
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-50154
• article
  https://lore.kernel.org/linux-cve-announce/2024110745-CVE-2024-50154-0259@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-50275
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-50275
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-50275
• article
  https://lore.kernel.org/linux-cve-announce/2024111934-CVE-2024-50275-2e49@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-53088
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-53088
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-53088
• article
  https://lore.kernel.org/linux-cve-announce/2024111906-CVE-2024-53088-795c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-57947
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2341755
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-57947
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-57947
• article
  https://lore.kernel.org/linux-cve-announce/2025012322-CVE-2024-57947-480e@gregkh/T