Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
almalinuxAlmaLinuxALSA-2024:3627
HistoryJun 05, 2024 - 12:00 a.m.

Moderate: kernel-rt security and bug fix update

2024-06-0500:00:00
errata.almalinux.org
kernel-rt
security
bug fix
update
real time linux kernel
cve
rsa decryption
rt source tree
vulnerability
jira:almalinux-34640
jira:almalinux-23022
marvin

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.3%

JSON

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
  • kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)
  • kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
  • kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
  • kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
  • kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)
  • kernel: use after free in i2c (CVE-2019-25162)
  • kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
  • kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)
  • kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)
  • kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)
  • kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
  • kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
  • kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
  • kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)
  • kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
  • kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)
  • kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
  • kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
  • kernel: pid: take a reference when initializing cad_pid (CVE-2021-47118)
  • kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
  • kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
  • kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
  • kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)
  • kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)
  • kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
  • kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)
  • kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)
  • kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
  • kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)
  • kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)
  • kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)
  • kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
  • kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
  • kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)
  • kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)
  • kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)
  • kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
  • kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)

Bug Fix(es):

  • kernel-rt: update RT source tree to the latest AlmaLinux-8.10.z kernel (JIRA:AlmaLinux-34640)
  • kernel-rt: epoll_wait not reporting catching all events to application (JIRA:AlmaLinux-23022)
OSVersionArchitecturePackageVersionFilename
almalinux8x86_64kernel-rt-modules< 4.18.0-553.5.1.rt7.346.el8_10kernel-rt-modules-4.18.0-553.5.1.rt7.346.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-debug< 4.18.0-553.5.1.rt7.346.el8_10kernel-rt-debug-4.18.0-553.5.1.rt7.346.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-core< 4.18.0-553.5.1.rt7.346.el8_10kernel-rt-core-4.18.0-553.5.1.rt7.346.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-modules-extra< 4.18.0-553.5.1.rt7.346.el8_10kernel-rt-modules-extra-4.18.0-553.5.1.rt7.346.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt< 4.18.0-553.5.1.rt7.346.el8_10kernel-rt-4.18.0-553.5.1.rt7.346.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-kvm< 4.18.0-553.5.1.rt7.346.el8_10kernel-rt-kvm-4.18.0-553.5.1.rt7.346.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-debug-devel< 4.18.0-553.5.1.rt7.346.el8_10kernel-rt-debug-devel-4.18.0-553.5.1.rt7.346.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-debug-core< 4.18.0-553.5.1.rt7.346.el8_10kernel-rt-debug-core-4.18.0-553.5.1.rt7.346.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-devel< 4.18.0-553.5.1.rt7.346.el8_10kernel-rt-devel-4.18.0-553.5.1.rt7.346.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-debug-modules< 4.18.0-553.5.1.rt7.346.el8_10kernel-rt-debug-modules-4.18.0-553.5.1.rt7.346.el8_10.x86_64.rpm
Rows per page:
1-10 of 121

References

Related

almalinux 1
nessus 13
osv 4
rocky 2
oraclelinux 2
redhat 3
redhatcve 25
cve 23
debiancve 24
prion 11
cvelist 26
cbl_mariner 2
ubuntucve 26
nvd 26
vulnrichment 11
almalinux
almalinux
Moderate: kernel update
2024-06-05 00:00:00
nessus
nessus
RHEL 8 : kernel-rt (RHSA-2024:3627)
2024-06-05 00:00:00
AlmaLinux 8 : kernel-rt (ALSA-2024:3627)
2024-06-05 00:00:00
Rocky Linux 8 : kernel-rt (RLSA-2024:3627)
2024-06-14 00:00:00
osv
osv
Moderate: kernel-rt security and bug fix update
2024-06-05 00:00:00
Moderate: kernel-rt security and bug fix update
2024-06-14 13:59:36
Moderate: kernel update
2024-06-05 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2024-06-14 13:59:36
kernel update
2024-06-14 13:59:16
oraclelinux
oraclelinux
kernel update
2024-06-05 00:00:00
kernel security and bug fix update
2024-05-23 00:00:00
redhat
redhat
(RHSA-2024:3460) Moderate: kernel-rt security and bug fix update
2024-05-29 07:38:15
(RHSA-2024:3461) Moderate: kernel security and bug fix update
2024-05-29 07:38:15
(RHSA-2024:3306) Moderate: kernel security and bug fix update
2024-05-23 05:51:19
redhatcve
redhatcve
CVE-2023-52565
2024-03-04 17:25:40
CVE-2021-47153
2024-03-25 17:53:26
CVE-2024-26642
2024-03-21 23:03:58
cve
cve
CVE-2023-52565
2024-03-02 22:15:48
CVE-2021-47118
2024-03-15 21:15:06
CVE-2019-25162
2024-02-26 18:15:07
debiancve
debiancve
CVE-2021-47153
2024-03-25 09:15:09
CVE-2023-52513
2024-03-02 22:15:47
CVE-2024-26743
2024-04-03 17:15:51
prion
prion
Spoofing
2024-03-02 22:15:00
Spoofing
2024-03-02 22:15:00
Design/Logic Flaw
2024-03-02 22:15:00
cvelist
cvelist
CVE-2019-25162 i2c: Fix a potential use after free
2024-02-26 17:20:20
CVE-2023-52513 RDMA/siw: Fix connection failure handling
2024-03-02 21:52:24
CVE-2020-36777 media: dvbdev: Fix memory leak in dvb_media_device_free()
2024-02-27 18:40:26
cbl_mariner
cbl_mariner
CVE-2024-26993 affecting package hyperv-daemons for versions less than 5.15.158.1-1
2024-06-12 22:23:00
CVE-2024-26973 affecting package hyperv-daemons for versions less than 5.15.158.1-1
2024-06-12 22:23:00
ubuntucve
ubuntucve
CVE-2020-36777
2024-02-27 00:00:00
CVE-2024-26919
2024-04-17 00:00:00
CVE-2024-26664
2024-04-02 00:00:00
nvd
nvd
CVE-2019-25162
2024-02-26 18:15:07
CVE-2021-46934
2024-02-27 10:15:07
CVE-2021-47055
2024-02-29 23:15:07
vulnrichment
vulnrichment
CVE-2024-26743 RDMA/qedr: Fix qedr_create_user_qp error flow
2024-04-03 17:00:32
CVE-2024-26659 xhci: handle isoc Babble and Buffer Overrun events properly
2024-04-02 06:22:09
CVE-2024-26643 netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
2024-03-21 10:43:44

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.3%

JSON
Related for ALSA-2024:3627
almalinux1nessus13osv4rocky2oraclelinux2redhat3redhatcve25cve23debiancve24prion11cvelist26cbl_mariner2ubuntucve26nvd26vulnrichment11