Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 10

• High 7.8
  CVE-2024-26976

  KVM: Always flush async #PF workqueue when vCPU is being destroyed

  In the Linux kernel, the following vulnerability has been resolved: KVM: Always flush async #PF workqueue when vCPU is being destroyed Always flush the per-vCPU async #PF workqueue when a vCPU is clearing its completion queue, e.g. when a VM and all its vCPUs…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 1, 2024
• High 7.8
  CVE-2024-27410

  wifi: nl80211: reject iftype change with mesh ID change

  In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject iftype change with mesh ID change It's currently possible to change the mesh ID when the interface isn't yet in mesh mode, at the same time as changing it into mesh mode…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 17, 2024
• High 7.8
  CVE-2024-35810

  drm/vmwgfx: Fix the lifetime of the bo cursor memory

  In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix the lifetime of the bo cursor memory The cleanup can be dispatched while the atomic update is still active, which means that the memory acquired in the atomic update needs to …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 17, 2024
• High 7.8
  CVE-2024-50264

  vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans

  In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopback communication, a dangling pointer can be created in vsk->trans, potentially leading to a Use-After…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 19, 2024
• High 7.3
  CVE-2024-35888

  erspan: make sure erspan_base_hdr is present in skb->head

  In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspan_base_hdr is present in skb->head syzbot reported a problem in ip6erspan_rcv() [1] Issue is that ip6erspan_rcv() (and erspan_rcv()) no longer make sure erspan_base_hdr…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024
• High 7.3
  CVE-2025-22013

  KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state There are several problems with the way hyp code lazily saves the host's FPSIMD/SVE state, including: * Host SVE being discard…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 8, 2025
• Medium 5.5
  CVE-2023-52653

  SUNRPC: fix a memleak in gss_import_v2_context

  In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix a memleak in gss_import_v2_context The ctx->mech_used.data allocated by kmemdup is not freed in neither gss_import_v2_context nor it only caller gss_krb5_import_sec_context, which…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2024
• Medium 5.5
  CVE-2024-23848

  In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jan 23, 2024
• Unscored —
  CVE-2024-27010

  net/sched: Fix mirred deadlock on device recursion

  In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix mirred deadlock on device recursion When the mirred action is used on a classful egress qdisc and a packet is mirrored or redirected to self we hit a qdisc lock deadlock. See t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2024
• Unscored —
  CVE-2024-35925

  block: prevent division by zero in blk_rq_stat_sum()

  In the Linux kernel, the following vulnerability has been resolved: block: prevent division by zero in blk_rq_stat_sum() The expression dst->nr_samples + src->nr_samples may have zero value on overflow. It is necessary to add a check to avoid division by zero…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2260038
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278279
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278350
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278515
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281113
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281215
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281693
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281752
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2327168
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3510.json
• report
  https://access.redhat.com/security/cve/CVE-2023-52653
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52653
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52653
• article
  https://lore.kernel.org/linux-cve-announce/2024050131-CVE-2023-52653-a5c2@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-23848
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-23848
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-23848
• article
  https://lore.kernel.org/lkml/e9f42704-2f99-4f2c-ade5-f952e5fd53e5%40xs4all.nl/
• report
  https://access.redhat.com/security/cve/CVE-2024-26976
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26976
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26976
• article
  https://lore.kernel.org/linux-cve-announce/2024050133-CVE-2024-26976-60d4@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-27010
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-27010
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-27010
• article
  https://lore.kernel.org/linux-cve-announce/2024050148-CVE-2024-27010-5a68@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-27410
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-27410
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-27410
• article
  https://lore.kernel.org/linux-cve-announce/2024051701-CVE-2024-27410-874a@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-35810
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35810
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35810
• article
  https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35810-1b33@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-35888
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35888
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35888
• article
  https://lore.kernel.org/linux-cve-announce/2024051947-CVE-2024-35888-1e04@gregkh/T