Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 11

• Critical 9.3
  CVE-2024-35939

  dma-direct: Leak pages on dma_set_decrypted() failure

  In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dma_set_decrypted() failure On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is retu…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 19, 2024
• High 7.8
  CVE-2024-38581

  drm/amdgpu/mes: fix use-after-free issue

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/mes: fix use-after-free issue Delete fence fallback timer to fix the ramdom use-after-free issue. v2: move to amdgpu_mes.c

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 19, 2024
• High 7.8
  CVE-2024-42301

  dev/parport: fix the array out-of-bounds risk

  In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bounds issues caused by sprintf by replacing it with snprintf for safer data copying, ensuring the destination buffer is not o…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 17, 2024
• Medium 6.4
  CVE-2024-35853

  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash

  In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another. This is done by iterating over all chunks (all the filters with th…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 17, 2024
• Unscored —
  CVE-2023-52528

  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg

  In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the following uninit-value access issue: ===================================================== BUG: KMSAN: u…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 2, 2024
• Unscored —
  CVE-2023-52878

  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds

  In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds If the "struct can_priv::echoo_skb" is accessed out of bounds, this would cause a kernel crash…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• Unscored —
  CVE-2024-26743

  RDMA/qedr: Fix qedr_create_user_qp error flow

  In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: Fix qedr_create_user_qp error flow Avoid the following warning by making sure to free the allocated resources in case that qedr_init_user_queue() fail. -----------[ cut here ]-----…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 3, 2024
• Unscored —
  CVE-2024-35944

  VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()

  In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() Syzkaller hit 'WARNING in dg_dispatch_as_host' bug. memcpy: detected field-spanning write (size 56) of single field "&dg_info->msg…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024
• Unscored —
  CVE-2024-36004

  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue

  In the Linux kernel, the following vulnerability has been resolved: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue Issue reported by customer during SRIOV testing, call trace: When both i40e and the i40iw driver are loaded, a warning in check_flush_depend…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 20, 2024
• Unscored —
  CVE-2024-42070

  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register store validation for NFT_DATA_VALUE is conditional, however, the datatype is always either NFT_DATA_VAL…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 29, 2024
• Unscored —
  CVE-2024-42114

  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values syzbot is able to trigger softlockups, setting NL80211_ATTR_TXQ_QUANTUM to 2^31. We had a similar issue in sch_fq, fixed with commit d…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 30, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2267789
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273262
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281255
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281807
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281817
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281953
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282680
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2293408
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2300508
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2301477
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2305446
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4342.json
• report
  https://access.redhat.com/security/cve/CVE-2023-52528
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52528
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52528
• article
  https://lore.kernel.org/linux-cve-announce/2024030254-CVE-2023-52528-c33b@gregkh/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2023-52878
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52878
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52878
• article
  https://lore.kernel.org/linux-cve-announce/2024052122-CVE-2023-52878-d433@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26743
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26743
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26743
• article
  https://lore.kernel.org/linux-cve-announce/2024040301-CVE-2024-26743-6034@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-35853
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35853
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35853
• article
  https://lore.kernel.org/linux-cve-announce/2024051740-CVE-2024-35853-869a@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-35939
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35939
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35939
• article
  https://lore.kernel.org/linux-cve-announce/2024051919-CVE-2024-35939-f877@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-35944
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35944
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35944
• article
  https://lore.kernel.org/linux-cve-announce/2024051920-CVE-2024-35944-a860@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-36004
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-36004