Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 13

• High 7.1
  CVE-2024-53150 Exploited

  ALSA: usb-audio: Fix out of bounds reads when finding clock sources

  In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traversing for clock descriptors. That is, wh…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 24, 2024

  KEV Apr 9, 2025
• High 8.8
  CVE-2024-26779

  wifi: mac80211: fix race condition on enabling fast-xmit

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix race condition on enabling fast-xmit fast-xmit must only be enabled after the sta has been uploaded to the driver, otherwise it could end up passing the not-yet-uploaded s…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 3, 2024
• High 7.8
  CVE-2024-26614

  tcp: make sure init the accept_queue's spinlocks once

  In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the accept_queue's spinlocks once When I run syz's reproduction C program locally, it causes the following issue: pvqspinlock: lock 0xffff9d181cd5c660 has corrupted value …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 29, 2024
• Medium 4.7
  CVE-2024-50192

  irqchip/gic-v4: Don't allow a VMOVP on a dying VPE

  In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE Kunkun Jiang reported that there is a small window of opportunity for userspace to force a change of affinity for a VPE while the VPE has al…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 8, 2024
• Unscored —
  CVE-2021-47101

  asix: fix uninit-value in asix_mdio_read()

  In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asix_mdio_read() asix_read_cmd() may read less than sizeof(smsr) bytes and in this case smsr will be uninitialized. Fail log: BUG: KMSAN: uninit-value in asix_check_…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 4, 2024
• Unscored —
  CVE-2023-52762

  virtio-blk: fix implicit overflow on virtio_max_dma_size

  In the Linux kernel, the following vulnerability has been resolved: virtio-blk: fix implicit overflow on virtio_max_dma_size The following codes have an implicit conversion from size_t to u32: (u32)max_size = (size_t)virtio_max_dma_size(vdev); This may lead o…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• Unscored —
  CVE-2023-52784

  bonding: stop the device in bond_setup_by_slave()

  In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bond_setup_by_slave() Commit 9eed321cde22 ("net: lapbether: only support ethernet devices") has been able to keep syzbot away from net/lapb, until today. In the fo…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• Unscored —
  CVE-2024-27048

  wifi: brcm80211: handle pmk_op allocation failure

  In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: handle pmk_op allocation failure The kzalloc() in brcmf_pmksa_v3_op() will return null if the physical memory has run out. As a result, if we dereference the null value, the …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 1, 2024
• Unscored —
  CVE-2024-35900

  netfilter: nf_tables: reject new basechain after table flag update

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject new basechain after table flag update When dormant flag is toggled, hooks are disabled in the commit phase by iterating over current chains in table (existing and…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024
• Unscored —
  CVE-2024-35938

  wifi: ath11k: decrease MHI channel buffer length to 8KB

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: decrease MHI channel buffer length to 8KB Currently buf_len field of ath11k_mhi_config_qca6390 is assigned with 0, making MHI use a default size, 64KB, to allocate channel buffe…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024
• Unscored —
  CVE-2024-36010

  igb: Fix string truncation warnings in igb_set_fw_version

  In the Linux kernel, the following vulnerability has been resolved: igb: Fix string truncation warnings in igb_set_fw_version Commit 1978d3ead82c ("intel: fix string truncation warnings") fixes '-Wformat-truncation=' warnings in igb_main.c by using kasprintf.…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 22, 2024
• Unscored —
  CVE-2024-36902

  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()

  In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to trigger the following crash [1], caused by unsafe ip6_dst_idev() use. Indeed ip6_dst_idev() can retur…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 30, 2024
• Unscored —
  CVE-2024-36939

  nfs: Handle error of rpc_proc_register() in nfs_net_init().

  In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpc_proc_register() in nfs_net_init(). syzkaller reported a warning [0] triggered while destroying immature netns. rpc_proc_register() was called in init_nfs_fs(), but it…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 30, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2267916
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2269211
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273223
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278431
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281664
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281819
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282623
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282772
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282950
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2284545
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2284628
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2324612
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2333971
• article
  https://issues.redhat.com/browse/RHEL-83039
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3935.json
• report
  https://access.redhat.com/security/cve/CVE-2021-47101
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-47101
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-47101
• article
  https://lore.kernel.org/linux-cve-announce/2024030415-CVE-2021-47101-f3fa@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-52762
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52762
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52762
• article
  https://lore.kernel.org/linux-cve-announce/2024052147-CVE-2023-52762-fe90@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-52784
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52784
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52784
• article
  https://lore.kernel.org/linux-cve-announce/2024052154-CVE-2023-52784-80ad@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26614
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26614
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26614
• article
  https://lore.kernel.org/linux-cve-announce/20240229155245.1571576-46-lee@kernel.org/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26779
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26779
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26779
• article
  https://lore.kernel.org/linux-cve-announce/2024040310-CVE-2024-26779-8030@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-27048
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-27048
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-27048