Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 11

• High 7.8
  CVE-2024-47668

  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()

  In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth b…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 9, 2024
• High 7.8
  CVE-2024-53141

  netfilter: ipset: add missing range check in bitmap_ip_uadt

  In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip and ip_to are slightly swapped. Therefore…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 6, 2024
• Medium 4.4
  CVE-2023-52492

  dmaengine: fix NULL pointer in channel unregistration function

  In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix NULL pointer in channel unregistration function __dma_async_device_channel_register() can fail. In case of failure, chan->local is freed (with free_percpu()), and chan->local i…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 29, 2024
• Medium 4.4
  CVE-2024-0340

  Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()

  A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issu…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jan 9, 2024
• Unscored —
  CVE-2023-52594

  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() Fix an array-index-out-of-bounds read in ath9k_htc_txstatus(). The bug occurs when txs->cnt, data from a URB …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 6, 2024
• Unscored —
  CVE-2023-52756 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  May 21, 2024
• Unscored —
  CVE-2023-52813

  crypto: pcrypt - Fix hungtask for PADATA_RESET

  In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix hungtask for PADATA_RESET We found a hungtask bug in test_aead_vec_cfg as follows: INFO: task cryptomgr_test:391009 blocked for more than 120 seconds. "echo 0 > /proc/sys…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• Unscored —
  CVE-2024-26840

  cachefiles: fix memory leak in cachefiles_add_cache()

  In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefiles_add_cache() The following memory leak was reported after unbinding /dev/cachefiles: =================================================================…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 17, 2024
• Unscored —
  CVE-2024-26892

  wifi: mt76: mt7921e: fix use-after-free in free_irq()

  In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix use-after-free in free_irq() From commit a304e1b82808 ("[PATCH] Debug shared irqs"), there is a test to make sure the shared irq handler should be able to handle the …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 17, 2024
• Unscored —
  CVE-2024-35877

  x86/mm/pat: fix VM_PAT handling in COW mappings

  In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: fix VM_PAT handling in COW mappings PAT handling won't do the right thing in COW mappings: the first PTE (or, in fact, all PTEs) can be replaced during write faults to point at an…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024
• Unscored —
  CVE-2024-35912

  wifi: iwlwifi: mvm: rfi: fix potential response leaks

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: rfi: fix potential response leaks If the rx payload length check fails, or if kmemdup() fails, we still need to free the command response. Fix that.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 19, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2257406
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2268317
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2269183
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2275573
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2275666
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281636
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281720
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282653
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282742
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2317601
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2330763
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7526.json
• report
  https://access.redhat.com/security/cve/CVE-2023-52492
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52492
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52492
• article
  https://lore.kernel.org/linux-cve-announce/20240229155245.1571576-33-lee@kernel.org/T
• report
  https://access.redhat.com/security/cve/CVE-2023-52594
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52594
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52594
• article
  https://lore.kernel.org/linux-cve-announce/2024030645-CVE-2023-52594-9b84@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-52756
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52756
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52756
• article
  https://lore.kernel.org/linux-cve-announce/2024052146-CVE-2023-52756-f694@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-52813
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52813
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52813
• article
  https://lore.kernel.org/linux-cve-announce/2024052103-CVE-2023-52813-0704@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-0340
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-0340
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-0340
• article
  https://lore.kernel.org/lkml/5kn47peabxjrptkqa6dwtyus35ahf4pcj4qm4pumse33kxqpjw@mec4se5relrc/T/
• report
  https://access.redhat.com/security/cve/CVE-2024-26840
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26840
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26840
• article
  https://lore.kernel.org/linux-cve-announce/2024041715-CVE-2024-26840-057d@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26892
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26892