Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 7

• High 7.8
  CVE-2023-52606

  powerpc/lib: Validate size for vector operations

  In the Linux kernel, the following vulnerability has been resolved: powerpc/lib: Validate size for vector operations Some of the fp/vmx code in sstep.c assume a certain maximum size for the instructions being emulated. The size of those operations however is …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 6, 2024
• High 7.8
  CVE-2024-26921

  inet: inet_defrag: prevent sk release while still in use

  In the Linux kernel, the following vulnerability has been resolved: inet: inet_defrag: prevent sk release while still in use ip_local_out() and other functions can pass skb->sk as function argument. If the skb is a fragment and reassembly happens before such …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 18, 2024
• High 7.8
  CVE-2024-36933

  nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().

  In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). syzbot triggered various splats (see [0] and links) by a crafted GSO packet of VIRTIO_NET_HDR_GSO_UDP layer…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 30, 2024
• Unscored —
  CVE-2023-54114

  net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()

  In the Linux kernel, the following vulnerability has been resolved: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() As the call trace shows, skb_panic was caused by wrong skb->mac_header in nsh_gso_segment(): invalid opcode: 0000 [#1] …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 24, 2025
• Unscored —
  CVE-2024-26645

  tracing: Ensure visibility when inserting an element into tracing_map

  In the Linux kernel, the following vulnerability has been resolved: tracing: Ensure visibility when inserting an element into tracing_map Running the following two commands in parallel on a multi-processor AArch64 machine can sporadically produce an unexpecte…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Mar 26, 2024
• Unscored —
  CVE-2024-27042 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  May 1, 2024
• Unscored —
  CVE-2024-35930

  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() The call to lpfc_sli4_resume_rpi() in lpfc_rcv_padisc() may return an unsuccessful status. In such cases, the elsiocb is not issued, …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2268293
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2271648
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2275928
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278447
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281519
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2284488
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8796.json
• report
  https://access.redhat.com/security/cve/CVE-2023-52606
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52606
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52606
• article
  https://lore.kernel.org/linux-cve-announce/2024030647-CVE-2023-52606-fdcc@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-54114
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2425196
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-54114
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-54114
• article
  https://lore.kernel.org/linux-cve-announce/2025122414-CVE-2023-54114-8362@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26645
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26645
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26645
• article
  https://lore.kernel.org/linux-cve-announce/20240326151722.1258576-4-lee@kernel.org/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26921
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26921
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26921
• article
  https://lore.kernel.org/linux-cve-announce/2024041819-CVE-2024-26921-e3b3@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-27042
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-27042
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-27042
• article
  https://lore.kernel.org/linux-cve-announce/2024050113-CVE-2024-27042-e812@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-35930
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35930
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35930
• article
  https://lore.kernel.org/linux-cve-announce/2024051916-CVE-2024-35930-5571@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-36933
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-36933
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-36933
• article
  https://lore.kernel.org/linux-cve-announce/2024053042-CVE-2024-36933-444e@gregkh/T