Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
almalinuxAlmaLinuxALSA-2024:3618
HistoryJun 05, 2024 - 12:00 a.m.

Moderate: kernel update

2024-06-0500:00:00
errata.almalinux.org
3
linux
kernel
cve-2023-6240
cve-2024-0340
cve-2024-25744
cve-2024-26593
cve-2023-52445
rsa
vhost
int80 syscall
i2c
pvrusb2
x86/fpu
media
dvbdev
usb
mtd
net/smc
vt
integer overflow
homvenetfilter
nf_tables
i801
xhci
hwmon
wifi
mac80211
rdma/srpt
rdma/qedr
tty
ulpi
usb
usb-storage
net:emac/emac-mac
powerpc/pseries
uio
ath9k
rt2x00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.3%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Marvin vulnerability side-channel leakage in the RSA decryption
    operation (CVE-2023-6240)
  • kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()
    (CVE-2024-0340)
  • kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
  • kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
  • kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
  • kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer
    that cause loop forever (CVE-2024-26603)
  • kernel: use after free in i2c (CVE-2019-25162)
  • kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
  • kernel: media: dvbdev: Fix memory leak in dvb_media_device_free()
    (CVE-2020-36777)
  • kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors
    (CVE-2023-52477)
  • kernel: mtd: require write permissions for locking and badblock ioctls
    (CVE-2021-47055)
  • kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump
    (CVE-2024-26615)
  • kernel: vt: fix memory overlapping when deleting chars in the buffer
    (CVE-2022-48627)
  • kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
  • kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu()
    (CVE-2023-52565)
  • kernel: net: bridge: data races indata-races in br_handle_frame_finish()
    (CVE-2023-52578)
  • kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
    (CVE-2023-52528)
  • kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
  • kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
  • kernel: pid: take a reference when initializing cad_pid (CVE-2021-47118)
  • kernel: net/sched: act_ct: fix skb leak and crash on ooo frags
    (CVE-2023-52610)
  • kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set
    with timeout (CVE-2024-26643)
  • kernel: netfilter: nf_tables: disallow anonymous set with timeout flag
    (CVE-2024-26642)
  • kernel: i2c: i801: Don't generate an interrupt on bus reset
    (CVE-2021-47153)
  • kernel: xhci: handle isoc Babble and Buffer Overrun events properly
    (CVE-2024-26659)
  • kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
  • kernel: wifi: mac80211: fix race condition on enabling fast-xmit
    (CVE-2024-26779)
  • kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter
    (CVE-2024-26744)
  • kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
  • kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
    (CVE-2021-47185)
  • kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
    (CVE-2024-26901)
  • kernel: RDMA/srpt: Do not register event handler until srpt device is fully
    setup (CVE-2024-26872)
  • kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
  • kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
  • kernel: USB: core: Fix deadlock in usb_deauthorize_interface()
    (CVE-2024-26934)
  • kernel: USB: core: Fix deadlock in port "disable" sysfs attribute
    (CVE-2024-26933)
  • kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection()
    (CVE-2024-26993)
  • kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
  • kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
    (CVE-2024-27059)
  • kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)
  • kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)
  • kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)
  • kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
  • kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (CVE-2023-52594)
  • kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)
OSVersionArchitecturePackageVersionFilename
almalinux8noarchkernel-abi-stablelists< 4.18.0-553.5.1.el8_10kernel-abi-stablelists-4.18.0-553.5.1.el8_10.noarch.rpm
almalinux8noarchkernel-doc< 4.18.0-553.5.1.el8_10kernel-doc-4.18.0-553.5.1.el8_10.noarch.rpm
almalinux8x86_64python3-perf< 4.18.0-553.5.1.el8_10python3-perf-4.18.0-553.5.1.el8_10.x86_64.rpm
almalinux8x86_64bpftool< 4.18.0-553.5.1.el8_10bpftool-4.18.0-553.5.1.el8_10.x86_64.rpm
almalinux8x86_64kernel-devel< 4.18.0-553.5.1.el8_10kernel-devel-4.18.0-553.5.1.el8_10.x86_64.rpm
almalinux8x86_64kernel-tools< 4.18.0-553.5.1.el8_10kernel-tools-4.18.0-553.5.1.el8_10.x86_64.rpm
almalinux8x86_64kernel-debug-devel< 4.18.0-553.5.1.el8_10kernel-debug-devel-4.18.0-553.5.1.el8_10.x86_64.rpm
almalinux8x86_64kernel-debug-modules-extra< 4.18.0-553.5.1.el8_10kernel-debug-modules-extra-4.18.0-553.5.1.el8_10.x86_64.rpm
almalinux8x86_64kernel-tools-libs< 4.18.0-553.5.1.el8_10kernel-tools-libs-4.18.0-553.5.1.el8_10.x86_64.rpm
almalinux8x86_64kernel-modules< 4.18.0-553.5.1.el8_10kernel-modules-4.18.0-553.5.1.el8_10.x86_64.rpm
Rows per page:
1-10 of 771

References

Related

almalinux 1
rocky 2
nessus 14
osv 4
oraclelinux 2
redhat 4
redhatcve 23
cve 23
debiancve 25
prion 10
cvelist 26
ubuntucve 24
vulnrichment 11
cbl_mariner 2
nvd 28
almalinux
almalinux
Moderate: kernel-rt security and bug fix update
2024-06-05 00:00:00
rocky
rocky
kernel update
2024-06-14 13:59:16
kernel-rt security and bug fix update
2024-06-14 13:59:36
nessus
nessus
RHEL 8 : kernel-rt (RHSA-2024:3627)
2024-06-05 00:00:00
AlmaLinux 8 : kernel-rt (ALSA-2024:3627)
2024-06-05 00:00:00
Rocky Linux 8 : kernel-rt (RLSA-2024:3627)
2024-06-14 00:00:00
osv
osv
Moderate: kernel-rt security and bug fix update
2024-06-05 00:00:00
Moderate: kernel-rt security and bug fix update
2024-06-14 13:59:36
Moderate: kernel update
2024-06-05 00:00:00
oraclelinux
oraclelinux
kernel update
2024-06-05 00:00:00
kernel security and bug fix update
2024-05-23 00:00:00
redhat
redhat
(RHSA-2024:3462) Moderate: kernel security and bug fix update
2024-05-29 07:38:48
(RHSA-2024:3460) Moderate: kernel-rt security and bug fix update
2024-05-29 07:38:15
(RHSA-2024:3461) Moderate: kernel security and bug fix update
2024-05-29 07:38:15
redhatcve
redhatcve
CVE-2023-52565
2024-03-04 17:25:40
CVE-2021-47153
2024-03-25 17:53:26
CVE-2021-47013
2024-02-29 07:39:07
cve
cve
CVE-2023-52565
2024-03-02 22:15:48
CVE-2021-47118
2024-03-15 21:15:06
CVE-2019-25162
2024-02-26 18:15:07
debiancve
debiancve
CVE-2021-47153
2024-03-25 09:15:09
CVE-2023-52513
2024-03-02 22:15:47
CVE-2024-26743
2024-04-03 17:15:51
prion
prion
Spoofing
2024-03-02 22:15:00
Spoofing
2024-03-02 22:15:00
Design/Logic Flaw
2024-02-27 19:04:00
cvelist
cvelist
CVE-2019-25162 i2c: Fix a potential use after free
2024-02-26 17:20:20
CVE-2023-52513 RDMA/siw: Fix connection failure handling
2024-03-02 21:52:24
CVE-2020-36777 media: dvbdev: Fix memory leak in dvb_media_device_free()
2024-02-27 18:40:26
ubuntucve
ubuntucve
CVE-2021-47013
2024-02-28 00:00:00
CVE-2020-36777
2024-02-27 00:00:00
CVE-2024-26919
2024-04-17 00:00:00
vulnrichment
vulnrichment
CVE-2021-47013 net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
2024-02-28 08:13:30
CVE-2024-26743 RDMA/qedr: Fix qedr_create_user_qp error flow
2024-04-03 17:00:32
CVE-2024-26659 xhci: handle isoc Babble and Buffer Overrun events properly
2024-04-02 06:22:09
cbl_mariner
cbl_mariner
CVE-2024-26993 affecting package hyperv-daemons for versions less than 5.15.158.1-1
2024-06-12 22:23:00
CVE-2024-26973 affecting package hyperv-daemons for versions less than 5.15.158.1-1
2024-06-12 22:23:00
nvd
nvd
CVE-2019-25162
2024-02-26 18:15:07
CVE-2021-46934
2024-02-27 10:15:07
CVE-2021-47055
2024-02-29 23:15:07

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.3%

JSON
Related for ALSA-2024:3618
almalinux1rocky2nessus14osv4oraclelinux2redhat4redhatcve23cve23debiancve25prion10cvelist26ubuntucve24vulnrichment11cbl_mariner2nvd28