Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 10

• High 7.8
  CVE-2024-53197 Exploited

  ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

  In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configura…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 27, 2024

  KEV Apr 9, 2025
• Medium 5.5
  CVE-2024-50302 Exploited

  HID: core: zero-initialize the report buffer

  In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 19, 2024

  KEV Mar 4, 2025
• High 7.8
  CVE-2023-52922

  can: bcm: Fix UAF in bcm_proc_show()

  In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcm_proc_show() BUG: KASAN: slab-use-after-free in bcm_proc_show+0x969/0xa80 Read of size 8 at addr ffff888155846230 by task cat/7862 CPU: 1 PID: 7862 Comm: cat Not taint…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 28, 2024
• High 7.8
  CVE-2024-35801

  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD

  In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD Commit 672365477ae8 ("x86/fpu: Update XFD state where required") and commit 8bf26758ca96 ("x86/fpu: Add XFD state to fpstate") introduced a p…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 17, 2024
• High 7.8
  CVE-2024-43830

  leds: trigger: Unregister sysfs attributes before calling deactivate()

  In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate() Triggers which have trigger specific sysfs attributes typically store related data in trigger-data allocated by the acti…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 17, 2024
• Medium 5.5
  CVE-2024-26744

  RDMA/srpt: Support specifying the srpt_service_guid parameter

  In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srpt_service_guid parameter Make loading ib_srpt with this parameter set work. The current behavior is that setting that parameter while loading the ib_srpt …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 3, 2024
• Unscored —
  CVE-2021-47497

  nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

  In the Linux kernel, the following vulnerability has been resolved: nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells If a cell has 'nbits' equal to a multiple of BITS_PER_BYTE the logic *p &= GENMASK((cell->nbits%BITS_PER_BYTE) - 1, 0); will become …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 22, 2024
• Unscored —
  CVE-2023-52520

  platform/x86: think-lmi: Fix reference leak

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix reference leak If a duplicate attribute is found using kset_find_obj(), a reference to that attribute is returned which needs to be disposed accordingly using kob…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 2, 2024
• Unscored —
  CVE-2023-52615

  hwrng: core - Fix page fault dead lock on mmap-ed hwrng

  In the Linux kernel, the following vulnerability has been resolved: hwrng: core - Fix page fault dead lock on mmap-ed hwrng There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /de…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 18, 2024
• Unscored —
  CVE-2024-26603

  x86/fpu: Stop relying on userspace for info to fault in xsave buffer

  In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Stop relying on userspace for info to fault in xsave buffer Before this change, the expected size of the user space buffer was taken from fx_sw->xstate_size. fx_sw->xstate_size can b…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 24, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2265833
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2267797
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270093
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273260
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281235
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282918
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2327169
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2329370
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2334412
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2490.json
• report
  https://access.redhat.com/security/cve/CVE-2021-47497
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-47497
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-47497
• article
  https://lore.kernel.org/linux-cve-announce/2024052242-CVE-2021-47497-449e@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-52520
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52520
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52520
• article
  https://lore.kernel.org/linux-cve-announce/2024030252-CVE-2023-52520-0a4e@gregkh/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2023-52615
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52615
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52615
• article
  https://lore.kernel.org/linux-cve-announce/20240318101458.2835626-10-lee@kernel.org/T
• report
  https://access.redhat.com/security/cve/CVE-2023-52922
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52922
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52922
• article
  https://lore.kernel.org/linux-cve-announce/2024112856-CVE-2023-52922-39e1@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26603
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26603
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26603
• article
  https://lore.kernel.org/linux-cve-announce/2024022415-CVE-2024-26603-42c2@gregkh/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2024-26744
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26744
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26744
• article
  https://lore.kernel.org/linux-cve-announce/2024040301-CVE-2024-26744-d344@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-35801
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35801
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35801
• article
  https://lore.kernel.org/linux-cve-announce/2024051738-CVE-2024-35801-8038@gregkh/T