Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
almalinuxAlmaLinuxALSA-2024:5101
HistoryAug 08, 2024 - 12:00 a.m.

Important: kernel security update

2024-08-0800:00:00
errata.almalinux.org
13
kernel
security update
powerpc
efivarfs
tracing
ext4
net/sched
stmmac
efi
quota
tipc
sunrpc
dmaengine/idxd
net/mlx5
x86/fpu
dyndbg
x86/mce
platform/x86
tipc
bug fixes
softdog configuration.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

16.8%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
  • (CVE-2023-28746)
  • (CVE-2023-52847)
  • (CVE-2021-47548)
  • (CVE-2024-36921)
  • (CVE-2024-26921)
  • (CVE-2021-47579)
  • (CVE-2024-36927)
  • (CVE-2024-39276)
  • (CVE-2024-33621)
  • (CVE-2024-27010)
  • (CVE-2024-26960)
  • (CVE-2024-38596)
  • (CVE-2022-48743)
  • (CVE-2024-26733)
  • (CVE-2024-26586)
  • (CVE-2024-26698)
  • (CVE-2023-52619)

Bug Fix(es):

  • AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
  • [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
  • [almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
  • lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
  • [Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
  • Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
  • blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
  • (JIRA:AlmaLinux-31798)
  • (JIRA:AlmaLinux-10263)
  • (JIRA:AlmaLinux-40901)
  • (JIRA:AlmaLinux-43547)
  • (JIRA:AlmaLinux-34876)

Enhancement(s):

  • [RFE] Add module parameters ‘soft_reboot_cmd’ and ‘soft_active_on_boot’ for customizing softdog configuration (JIRA:AlmaLinux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchkernel-doc< 4.18.0-553.16.1.el8_10kernel-doc-4.18.0-553.16.1.el8_10.noarch.rpm
almalinux8noarchkernel-abi-stablelists< 4.18.0-553.16.1.el8_10kernel-abi-stablelists-4.18.0-553.16.1.el8_10.noarch.rpm
almalinux8x86_64kernel-tools-libs< 4.18.0-553.16.1.el8_10kernel-tools-libs-4.18.0-553.16.1.el8_10.x86_64.rpm
almalinux8x86_64kernel-cross-headers< 4.18.0-553.16.1.el8_10kernel-cross-headers-4.18.0-553.16.1.el8_10.x86_64.rpm
almalinux8x86_64kernel-debug-devel< 4.18.0-553.16.1.el8_10kernel-debug-devel-4.18.0-553.16.1.el8_10.x86_64.rpm
almalinux8x86_64perf< 4.18.0-553.16.1.el8_10perf-4.18.0-553.16.1.el8_10.x86_64.rpm
almalinux8x86_64kernel-devel< 4.18.0-553.16.1.el8_10kernel-devel-4.18.0-553.16.1.el8_10.x86_64.rpm
almalinux8x86_64kernel-modules-extra< 4.18.0-553.16.1.el8_10kernel-modules-extra-4.18.0-553.16.1.el8_10.x86_64.rpm
almalinux8x86_64python3-perf< 4.18.0-553.16.1.el8_10python3-perf-4.18.0-553.16.1.el8_10.x86_64.rpm
almalinux8x86_64kernel-debug-core< 4.18.0-553.16.1.el8_10kernel-debug-core-4.18.0-553.16.1.el8_10.x86_64.rpm
Rows per page:
1-10 of 771

References

Related

almalinux 1
ubuntucve 25
debiancve 25
vulnrichment 25
osv 19
cvelist 24
nvd 28
cve 24
redhatcve 23
prion 2
nessus 1
cbl_mariner 1
redhat 1
almalinux
almalinux
Important: kernel-rt security update
2024-08-08 00:00:00
ubuntucve
ubuntucve
CVE-2021-47579
2024-06-19 00:00:00
CVE-2023-52658
2024-05-17 00:00:00
CVE-2021-46939
2024-02-27 00:00:00
debiancve
debiancve
CVE-2021-47579
2024-06-19 15:15:52
CVE-2024-36921
2024-05-30 16:15:15
CVE-2024-35801
2024-05-17 14:15:12
vulnrichment
vulnrichment
CVE-2021-47579 ovl: fix warning in ovl_create_real()
2024-06-19 14:53:46
CVE-2023-52658 Revert "net/mlx5: Block entering switchdev mode with ns inconsistency"
2024-05-17 12:01:24
CVE-2021-46939 tracing: Restructure trace_clock_global() to never block
2024-02-27 18:40:27
osv
osv
CVE-2021-47579
2024-06-19 15:15:00
CVE-2024-35876
2024-05-19 09:15:00
CVE-2024-35801
2024-05-17 14:15:00
cvelist
cvelist
CVE-2021-47579 ovl: fix warning in ovl_create_real()
2024-06-19 14:53:46
CVE-2024-26843 efi: runtime: Fix potential overflow of soft-reserved region size
2024-04-17 10:10:08
CVE-2021-46939 tracing: Restructure trace_clock_global() to never block
2024-02-27 18:40:27
nvd
nvd
CVE-2024-35876
2024-05-19 09:15:08
CVE-2024-35801
2024-05-17 14:15:12
CVE-2023-52847
2024-05-21 16:15:21
cve
cve
CVE-2024-35876
2024-05-19 09:15:08
CVE-2024-35801
2024-05-17 14:15:12
CVE-2023-52658
2024-05-17 12:15:09
redhatcve
redhatcve
CVE-2023-52658
2024-05-17 23:11:30
CVE-2021-46939
2024-02-28 08:03:56
CVE-2024-35876
2024-05-20 13:45:12
prion
prion
Spoofing
2024-02-27 19:04:00
Design/Logic Flaw
2024-02-22 17:15:00
nessus
nessus
RHEL 8 : kernel (RHSA-2024:4902)
2024-07-29 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-35801 affecting package hyperv-daemons for versions less than 6.6.35.1-1
2024-07-23 02:21:02
redhat
redhat
(RHSA-2024:4902) Moderate: kernel security update
2024-07-29 12:20:02

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

16.8%

JSON
Related for ALSA-2024:5101
almalinux1ubuntucve25debiancve25vulnrichment25osv19cvelist24nvd28cve24redhatcve23prion2nessus1cbl_mariner1redhat1