Lucene search

AlmaLinuxALSA-2024:5102

HistoryAug 08, 2024 - 12:00 a.m.

Important: kernel-rt security update

2024-08-0800:00:00

errata.almalinux.org

kernel-rt

security update

real time linux kernel

cve fixes

high determinism

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

JSON

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert “net/mlx5: Block entering switchdev mode with ns inconsistency” (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8x86_64kernel-rt-debug< 4.18.0-553.16.1.rt7.357.el8_10kernel-rt-debug-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-modules-extra< 4.18.0-553.16.1.rt7.357.el8_10kernel-rt-modules-extra-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-devel< 4.18.0-553.16.1.rt7.357.el8_10kernel-rt-devel-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-debug-modules< 4.18.0-553.16.1.rt7.357.el8_10kernel-rt-debug-modules-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-debug-core< 4.18.0-553.16.1.rt7.357.el8_10kernel-rt-debug-core-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-modules< 4.18.0-553.16.1.rt7.357.el8_10kernel-rt-modules-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-debug-devel< 4.18.0-553.16.1.rt7.357.el8_10kernel-rt-debug-devel-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-debug-kvm< 4.18.0-553.16.1.rt7.357.el8_10kernel-rt-debug-kvm-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-core< 4.18.0-553.16.1.rt7.357.el8_10kernel-rt-core-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux8x86_64kernel-rt-kvm< 4.18.0-553.16.1.rt7.357.el8_10kernel-rt-kvm-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	x86_64	kernel-rt-debug	< 4.18.0-553.16.1.rt7.357.el8_10	kernel-rt-debug-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux	8	x86_64	kernel-rt-modules-extra	< 4.18.0-553.16.1.rt7.357.el8_10	kernel-rt-modules-extra-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux	8	x86_64	kernel-rt-devel	< 4.18.0-553.16.1.rt7.357.el8_10	kernel-rt-devel-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux	8	x86_64	kernel-rt-debug-modules	< 4.18.0-553.16.1.rt7.357.el8_10	kernel-rt-debug-modules-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux	8	x86_64	kernel-rt-debug-core	< 4.18.0-553.16.1.rt7.357.el8_10	kernel-rt-debug-core-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux	8	x86_64	kernel-rt-modules	< 4.18.0-553.16.1.rt7.357.el8_10	kernel-rt-modules-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux	8	x86_64	kernel-rt-debug-devel	< 4.18.0-553.16.1.rt7.357.el8_10	kernel-rt-debug-devel-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux	8	x86_64	kernel-rt-debug-kvm	< 4.18.0-553.16.1.rt7.357.el8_10	kernel-rt-debug-kvm-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux	8	x86_64	kernel-rt-core	< 4.18.0-553.16.1.rt7.357.el8_10	kernel-rt-core-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm
almalinux	8	x86_64	kernel-rt-kvm	< 4.18.0-553.16.1.rt7.357.el8_10	kernel-rt-kvm-4.18.0-553.16.1.rt7.357.el8_10.x86_64.rpm

Rows per page:

1-10 of 121

References

access.redhat.com/errata/RHSA-2024:5102

access.redhat.com/security/cve/CVE-2021-46939

access.redhat.com/security/cve/CVE-2021-47257

access.redhat.com/security/cve/CVE-2021-47284

access.redhat.com/security/cve/CVE-2021-47304

access.redhat.com/security/cve/CVE-2021-47373

access.redhat.com/security/cve/CVE-2021-47408

access.redhat.com/security/cve/CVE-2021-47461

access.redhat.com/security/cve/CVE-2021-47468

access.redhat.com/security/cve/CVE-2021-47491

access.redhat.com/security/cve/CVE-2021-47548

access.redhat.com/security/cve/CVE-2021-47579

access.redhat.com/security/cve/CVE-2021-47624

access.redhat.com/security/cve/CVE-2022-48632

access.redhat.com/security/cve/CVE-2022-48743

access.redhat.com/security/cve/CVE-2022-48747

access.redhat.com/security/cve/CVE-2022-48757

access.redhat.com/security/cve/CVE-2023-52463

access.redhat.com/security/cve/CVE-2023-52469

access.redhat.com/security/cve/CVE-2023-52471

access.redhat.com/security/cve/CVE-2023-52486

access.redhat.com/security/cve/CVE-2023-52530

access.redhat.com/security/cve/CVE-2023-52619

access.redhat.com/security/cve/CVE-2023-52622

access.redhat.com/security/cve/CVE-2023-52623

access.redhat.com/security/cve/CVE-2023-52648

access.redhat.com/security/cve/CVE-2023-52653

access.redhat.com/security/cve/CVE-2023-52658

access.redhat.com/security/cve/CVE-2023-52662

access.redhat.com/security/cve/CVE-2023-52679

access.redhat.com/security/cve/CVE-2023-52707

access.redhat.com/security/cve/CVE-2023-52730

access.redhat.com/security/cve/CVE-2023-52756

access.redhat.com/security/cve/CVE-2023-52762

access.redhat.com/security/cve/CVE-2023-52764

access.redhat.com/security/cve/CVE-2023-52777

access.redhat.com/security/cve/CVE-2023-52784

access.redhat.com/security/cve/CVE-2023-52791

access.redhat.com/security/cve/CVE-2023-52796

access.redhat.com/security/cve/CVE-2023-52803

access.redhat.com/security/cve/CVE-2023-52811

access.redhat.com/security/cve/CVE-2023-52832

access.redhat.com/security/cve/CVE-2023-52834

access.redhat.com/security/cve/CVE-2023-52845

access.redhat.com/security/cve/CVE-2023-52847

access.redhat.com/security/cve/CVE-2023-52864

access.redhat.com/security/cve/CVE-2024-21823

access.redhat.com/security/cve/CVE-2024-2201

access.redhat.com/security/cve/CVE-2024-25739

access.redhat.com/security/cve/CVE-2024-26586

access.redhat.com/security/cve/CVE-2024-26614

access.redhat.com/security/cve/CVE-2024-26640

access.redhat.com/security/cve/CVE-2024-26660

access.redhat.com/security/cve/CVE-2024-26669

access.redhat.com/security/cve/CVE-2024-26686

access.redhat.com/security/cve/CVE-2024-26704

access.redhat.com/security/cve/CVE-2024-26733

access.redhat.com/security/cve/CVE-2024-26740

access.redhat.com/security/cve/CVE-2024-26772

access.redhat.com/security/cve/CVE-2024-26773

access.redhat.com/security/cve/CVE-2024-26802

access.redhat.com/security/cve/CVE-2024-26810

access.redhat.com/security/cve/CVE-2024-26837

access.redhat.com/security/cve/CVE-2024-26840

access.redhat.com/security/cve/CVE-2024-26843

access.redhat.com/security/cve/CVE-2024-26852

access.redhat.com/security/cve/CVE-2024-26853

access.redhat.com/security/cve/CVE-2024-26870

access.redhat.com/security/cve/CVE-2024-26878

access.redhat.com/security/cve/CVE-2024-26921

access.redhat.com/security/cve/CVE-2024-26925

access.redhat.com/security/cve/CVE-2024-26940

access.redhat.com/security/cve/CVE-2024-26958

access.redhat.com/security/cve/CVE-2024-26960

access.redhat.com/security/cve/CVE-2024-26961

access.redhat.com/security/cve/CVE-2024-27010

access.redhat.com/security/cve/CVE-2024-27011

access.redhat.com/security/cve/CVE-2024-27019

access.redhat.com/security/cve/CVE-2024-27020

access.redhat.com/security/cve/CVE-2024-27025

access.redhat.com/security/cve/CVE-2024-27065

access.redhat.com/security/cve/CVE-2024-27388

access.redhat.com/security/cve/CVE-2024-27395

access.redhat.com/security/cve/CVE-2024-27434

access.redhat.com/security/cve/CVE-2024-31076

access.redhat.com/security/cve/CVE-2024-33621

access.redhat.com/security/cve/CVE-2024-35790

access.redhat.com/security/cve/CVE-2024-35801

access.redhat.com/security/cve/CVE-2024-35807

access.redhat.com/security/cve/CVE-2024-35810

access.redhat.com/security/cve/CVE-2024-35814

access.redhat.com/security/cve/CVE-2024-35847

access.redhat.com/security/cve/CVE-2024-35876

access.redhat.com/security/cve/CVE-2024-35893

access.redhat.com/security/cve/CVE-2024-35896

access.redhat.com/security/cve/CVE-2024-35897

access.redhat.com/security/cve/CVE-2024-35899

access.redhat.com/security/cve/CVE-2024-35900

access.redhat.com/security/cve/CVE-2024-35910

access.redhat.com/security/cve/CVE-2024-35912

access.redhat.com/security/cve/CVE-2024-35924

access.redhat.com/security/cve/CVE-2024-35925

access.redhat.com/security/cve/CVE-2024-35930

access.redhat.com/security/cve/CVE-2024-35937

access.redhat.com/security/cve/CVE-2024-35938

access.redhat.com/security/cve/CVE-2024-35946

access.redhat.com/security/cve/CVE-2024-35947

access.redhat.com/security/cve/CVE-2024-35952

access.redhat.com/security/cve/CVE-2024-36000

access.redhat.com/security/cve/CVE-2024-36005

access.redhat.com/security/cve/CVE-2024-36006

access.redhat.com/security/cve/CVE-2024-36010

access.redhat.com/security/cve/CVE-2024-36016

access.redhat.com/security/cve/CVE-2024-36017

access.redhat.com/security/cve/CVE-2024-36020

access.redhat.com/security/cve/CVE-2024-36025

access.redhat.com/security/cve/CVE-2024-36270

access.redhat.com/security/cve/CVE-2024-36286

access.redhat.com/security/cve/CVE-2024-36489

access.redhat.com/security/cve/CVE-2024-36886

access.redhat.com/security/cve/CVE-2024-36889

access.redhat.com/security/cve/CVE-2024-36896

access.redhat.com/security/cve/CVE-2024-36904

access.redhat.com/security/cve/CVE-2024-36905

access.redhat.com/security/cve/CVE-2024-36917

access.redhat.com/security/cve/CVE-2024-36921

access.redhat.com/security/cve/CVE-2024-36927

access.redhat.com/security/cve/CVE-2024-36929

access.redhat.com/security/cve/CVE-2024-36933

access.redhat.com/security/cve/CVE-2024-36940

access.redhat.com/security/cve/CVE-2024-36941

access.redhat.com/security/cve/CVE-2024-36950

access.redhat.com/security/cve/CVE-2024-36954

access.redhat.com/security/cve/CVE-2024-36960

access.redhat.com/security/cve/CVE-2024-36971

access.redhat.com/security/cve/CVE-2024-36978

access.redhat.com/security/cve/CVE-2024-36979

access.redhat.com/security/cve/CVE-2024-38538

access.redhat.com/security/cve/CVE-2024-38555

access.redhat.com/security/cve/CVE-2024-38573

access.redhat.com/security/cve/CVE-2024-38575

access.redhat.com/security/cve/CVE-2024-38596

access.redhat.com/security/cve/CVE-2024-38615

access.redhat.com/security/cve/CVE-2024-38627

access.redhat.com/security/cve/CVE-2024-39276

access.redhat.com/security/cve/CVE-2024-39472

access.redhat.com/security/cve/CVE-2024-39476

access.redhat.com/security/cve/CVE-2024-39487

access.redhat.com/security/cve/CVE-2024-39502

access.redhat.com/security/cve/CVE-2024-40927

bugzilla.redhat.com/2263879

bugzilla.redhat.com/2265645

bugzilla.redhat.com/2265797

bugzilla.redhat.com/2266341

bugzilla.redhat.com/2266347

bugzilla.redhat.com/2266497

bugzilla.redhat.com/2267787

bugzilla.redhat.com/2268118

bugzilla.redhat.com/2269070

bugzilla.redhat.com/2269211

bugzilla.redhat.com/2270084

bugzilla.redhat.com/2270100

bugzilla.redhat.com/2271686

bugzilla.redhat.com/2271688

bugzilla.redhat.com/2272782

bugzilla.redhat.com/2272795

bugzilla.redhat.com/2273109

bugzilla.redhat.com/2273174

bugzilla.redhat.com/2273236

bugzilla.redhat.com/2273242

bugzilla.redhat.com/2273247

bugzilla.redhat.com/2273268

bugzilla.redhat.com/2273427

bugzilla.redhat.com/2273654

bugzilla.redhat.com/2275565

bugzilla.redhat.com/2275573

bugzilla.redhat.com/2275580

bugzilla.redhat.com/2275694

bugzilla.redhat.com/2275711

bugzilla.redhat.com/2275748

bugzilla.redhat.com/2275761

bugzilla.redhat.com/2275928

bugzilla.redhat.com/2277166

bugzilla.redhat.com/2277238

bugzilla.redhat.com/2277840

bugzilla.redhat.com/2278176

bugzilla.redhat.com/2278178

bugzilla.redhat.com/2278182

bugzilla.redhat.com/2278218

bugzilla.redhat.com/2278256

bugzilla.redhat.com/2278258

bugzilla.redhat.com/2278277

bugzilla.redhat.com/2278279

bugzilla.redhat.com/2278380

bugzilla.redhat.com/2278484

bugzilla.redhat.com/2278515

bugzilla.redhat.com/2278535

bugzilla.redhat.com/2278539

bugzilla.redhat.com/2278989

bugzilla.redhat.com/2280440

bugzilla.redhat.com/2281054

bugzilla.redhat.com/2281133

bugzilla.redhat.com/2281149

bugzilla.redhat.com/2281207

bugzilla.redhat.com/2281215

bugzilla.redhat.com/2281221

bugzilla.redhat.com/2281235

bugzilla.redhat.com/2281268

bugzilla.redhat.com/2281326

bugzilla.redhat.com/2281360

bugzilla.redhat.com/2281510

bugzilla.redhat.com/2281519

bugzilla.redhat.com/2281636

bugzilla.redhat.com/2281641

bugzilla.redhat.com/2281664

bugzilla.redhat.com/2281667

bugzilla.redhat.com/2281672

bugzilla.redhat.com/2281675

bugzilla.redhat.com/2281682

bugzilla.redhat.com/2281725

bugzilla.redhat.com/2281752

bugzilla.redhat.com/2281758

bugzilla.redhat.com/2281819

bugzilla.redhat.com/2281821

bugzilla.redhat.com/2281833

bugzilla.redhat.com/2281938

bugzilla.redhat.com/2281949

bugzilla.redhat.com/2281968

bugzilla.redhat.com/2281989

bugzilla.redhat.com/2282328

bugzilla.redhat.com/2282373

bugzilla.redhat.com/2282479

bugzilla.redhat.com/2282553

bugzilla.redhat.com/2282615

bugzilla.redhat.com/2282623

bugzilla.redhat.com/2282640

bugzilla.redhat.com/2282642

bugzilla.redhat.com/2282645

bugzilla.redhat.com/2282717

bugzilla.redhat.com/2282719

bugzilla.redhat.com/2282727

bugzilla.redhat.com/2282742

bugzilla.redhat.com/2282743

bugzilla.redhat.com/2282744

bugzilla.redhat.com/2282759

bugzilla.redhat.com/2282763

bugzilla.redhat.com/2282766

bugzilla.redhat.com/2282772

bugzilla.redhat.com/2282780

bugzilla.redhat.com/2282887

bugzilla.redhat.com/2282896

bugzilla.redhat.com/2282923

bugzilla.redhat.com/2282925

bugzilla.redhat.com/2282950

bugzilla.redhat.com/2283401

bugzilla.redhat.com/2283894

bugzilla.redhat.com/2284400

bugzilla.redhat.com/2284417

bugzilla.redhat.com/2284421

bugzilla.redhat.com/2284474

bugzilla.redhat.com/2284477

bugzilla.redhat.com/2284488

bugzilla.redhat.com/2284496

bugzilla.redhat.com/2284500

bugzilla.redhat.com/2284513

bugzilla.redhat.com/2284519

bugzilla.redhat.com/2284539

bugzilla.redhat.com/2284541

bugzilla.redhat.com/2284556

bugzilla.redhat.com/2284571

bugzilla.redhat.com/2284590

bugzilla.redhat.com/2284625

bugzilla.redhat.com/2290408

bugzilla.redhat.com/2292331

bugzilla.redhat.com/2293078

bugzilla.redhat.com/2293250

bugzilla.redhat.com/2293276

bugzilla.redhat.com/2293312

bugzilla.redhat.com/2293316

bugzilla.redhat.com/2293348

bugzilla.redhat.com/2293371

bugzilla.redhat.com/2293383

bugzilla.redhat.com/2293418

bugzilla.redhat.com/2293420

bugzilla.redhat.com/2293444

bugzilla.redhat.com/2293461

bugzilla.redhat.com/2293653

bugzilla.redhat.com/2293657

bugzilla.redhat.com/2293684

bugzilla.redhat.com/2293687

bugzilla.redhat.com/2293700

bugzilla.redhat.com/2293711

bugzilla.redhat.com/2294274

bugzilla.redhat.com/2295914

bugzilla.redhat.com/2296067

bugzilla.redhat.com/2297056

bugzilla.redhat.com/2297474

bugzilla.redhat.com/2297511

bugzilla.redhat.com/2298108

errata.almalinux.org/8/ALSA-2024-5102.html

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

JSON

Related for ALSA-2024:5102