Lucene search

GoogleOSV:ALSA-2024:5101

HistoryAug 08, 2024 - 12:00 a.m.

Important: kernel security update

2024-08-0800:00:00

Google

osv.dev

kernel security

linux operating system

cve-2023-52451

cve-2023-52463

cve-2021-46939

cve-2023-52622

cve-2024-26669

cve-2024-26802

cve-2024-26843

cve-2024-26878

cve-2024-36886

cve-2023-52653

cve-2024-21823

cve-2023-52658

cve-2024-35807

cve-2024-35801

cve-2024-35947

cve-2024-35893

cve-2024-35876

cve-2023-52864

cve-2023-52845

cve-2023-28746

cve-2023-52847

cve-2021-47548

cve-2024-36921

cve-2024-26921

cve-2021-47579

cve-2024-36927

cve-2024-39276

cve-2024-33621

cve-2024-27010

cve-2024-26960

cve-2024-38596

cve-2022-48743

cve-2024-26733

cve-2024-26586

cve-2024-26698

security update

bug fix

aws

hyper-v

enhancement

rfe

module parameters

softdog configuration

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

43.7%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
[almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
[Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
(JIRA:AlmaLinux-31798)
(JIRA:AlmaLinux-10263)
(JIRA:AlmaLinux-40901)
(JIRA:AlmaLinux-43547)
(JIRA:AlmaLinux-34876)

Enhancement(s):

[RFE] Add module parameters ‘soft_reboot_cmd’ and ‘soft_active_on_boot’ for customizing softdog configuration (JIRA:AlmaLinux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

References

access.redhat.com/errata/RHSA-2024:5101

access.redhat.com/security/cve/CVE-2021-46939

access.redhat.com/security/cve/CVE-2021-47018

access.redhat.com/security/cve/CVE-2021-47257

access.redhat.com/security/cve/CVE-2021-47284

access.redhat.com/security/cve/CVE-2021-47304

access.redhat.com/security/cve/CVE-2021-47373

access.redhat.com/security/cve/CVE-2021-47408

access.redhat.com/security/cve/CVE-2021-47461

access.redhat.com/security/cve/CVE-2021-47468

access.redhat.com/security/cve/CVE-2021-47491

access.redhat.com/security/cve/CVE-2021-47548

access.redhat.com/security/cve/CVE-2021-47579

access.redhat.com/security/cve/CVE-2021-47624

access.redhat.com/security/cve/CVE-2022-48632

access.redhat.com/security/cve/CVE-2022-48743

access.redhat.com/security/cve/CVE-2022-48747

access.redhat.com/security/cve/CVE-2022-48757

access.redhat.com/security/cve/CVE-2023-28746

access.redhat.com/security/cve/CVE-2023-52451

access.redhat.com/security/cve/CVE-2023-52463

access.redhat.com/security/cve/CVE-2023-52469

access.redhat.com/security/cve/CVE-2023-52471

access.redhat.com/security/cve/CVE-2023-52486

access.redhat.com/security/cve/CVE-2023-52530

access.redhat.com/security/cve/CVE-2023-52619

access.redhat.com/security/cve/CVE-2023-52622

access.redhat.com/security/cve/CVE-2023-52623

access.redhat.com/security/cve/CVE-2023-52648

access.redhat.com/security/cve/CVE-2023-52653

access.redhat.com/security/cve/CVE-2023-52658

access.redhat.com/security/cve/CVE-2023-52662

access.redhat.com/security/cve/CVE-2023-52679

access.redhat.com/security/cve/CVE-2023-52707

access.redhat.com/security/cve/CVE-2023-52730

access.redhat.com/security/cve/CVE-2023-52756

access.redhat.com/security/cve/CVE-2023-52762

access.redhat.com/security/cve/CVE-2023-52764

access.redhat.com/security/cve/CVE-2023-52775

access.redhat.com/security/cve/CVE-2023-52777

access.redhat.com/security/cve/CVE-2023-52784

access.redhat.com/security/cve/CVE-2023-52791

access.redhat.com/security/cve/CVE-2023-52796

access.redhat.com/security/cve/CVE-2023-52803

access.redhat.com/security/cve/CVE-2023-52811

access.redhat.com/security/cve/CVE-2023-52832

access.redhat.com/security/cve/CVE-2023-52834

access.redhat.com/security/cve/CVE-2023-52845

access.redhat.com/security/cve/CVE-2023-52847

access.redhat.com/security/cve/CVE-2023-52864

access.redhat.com/security/cve/CVE-2024-21823

access.redhat.com/security/cve/CVE-2024-2201

access.redhat.com/security/cve/CVE-2024-25739

access.redhat.com/security/cve/CVE-2024-26586

access.redhat.com/security/cve/CVE-2024-26614

access.redhat.com/security/cve/CVE-2024-26640

access.redhat.com/security/cve/CVE-2024-26660

access.redhat.com/security/cve/CVE-2024-26669

access.redhat.com/security/cve/CVE-2024-26686

access.redhat.com/security/cve/CVE-2024-26698

access.redhat.com/security/cve/CVE-2024-26704

access.redhat.com/security/cve/CVE-2024-26733

access.redhat.com/security/cve/CVE-2024-26740

access.redhat.com/security/cve/CVE-2024-26772

access.redhat.com/security/cve/CVE-2024-26773

access.redhat.com/security/cve/CVE-2024-26802

access.redhat.com/security/cve/CVE-2024-26810

access.redhat.com/security/cve/CVE-2024-26837

access.redhat.com/security/cve/CVE-2024-26840

access.redhat.com/security/cve/CVE-2024-26843

access.redhat.com/security/cve/CVE-2024-26852

access.redhat.com/security/cve/CVE-2024-26853

access.redhat.com/security/cve/CVE-2024-26870

access.redhat.com/security/cve/CVE-2024-26878

access.redhat.com/security/cve/CVE-2024-26908

access.redhat.com/security/cve/CVE-2024-26921

access.redhat.com/security/cve/CVE-2024-26925

access.redhat.com/security/cve/CVE-2024-26940

access.redhat.com/security/cve/CVE-2024-26958

access.redhat.com/security/cve/CVE-2024-26960

access.redhat.com/security/cve/CVE-2024-26961

access.redhat.com/security/cve/CVE-2024-27010

access.redhat.com/security/cve/CVE-2024-27011

access.redhat.com/security/cve/CVE-2024-27019

access.redhat.com/security/cve/CVE-2024-27020

access.redhat.com/security/cve/CVE-2024-27025

access.redhat.com/security/cve/CVE-2024-27065

access.redhat.com/security/cve/CVE-2024-27388

access.redhat.com/security/cve/CVE-2024-27395

access.redhat.com/security/cve/CVE-2024-27434

access.redhat.com/security/cve/CVE-2024-31076

access.redhat.com/security/cve/CVE-2024-33621

access.redhat.com/security/cve/CVE-2024-35790

access.redhat.com/security/cve/CVE-2024-35801

access.redhat.com/security/cve/CVE-2024-35807

access.redhat.com/security/cve/CVE-2024-35810

access.redhat.com/security/cve/CVE-2024-35814

access.redhat.com/security/cve/CVE-2024-35823

access.redhat.com/security/cve/CVE-2024-35824

access.redhat.com/security/cve/CVE-2024-35847

access.redhat.com/security/cve/CVE-2024-35876

access.redhat.com/security/cve/CVE-2024-35893

access.redhat.com/security/cve/CVE-2024-35896

access.redhat.com/security/cve/CVE-2024-35897

access.redhat.com/security/cve/CVE-2024-35899

access.redhat.com/security/cve/CVE-2024-35900

access.redhat.com/security/cve/CVE-2024-35910

access.redhat.com/security/cve/CVE-2024-35912

access.redhat.com/security/cve/CVE-2024-35924

access.redhat.com/security/cve/CVE-2024-35925

access.redhat.com/security/cve/CVE-2024-35930

access.redhat.com/security/cve/CVE-2024-35937

access.redhat.com/security/cve/CVE-2024-35938

access.redhat.com/security/cve/CVE-2024-35946

access.redhat.com/security/cve/CVE-2024-35947

access.redhat.com/security/cve/CVE-2024-35952

access.redhat.com/security/cve/CVE-2024-36000

access.redhat.com/security/cve/CVE-2024-36005

access.redhat.com/security/cve/CVE-2024-36006

access.redhat.com/security/cve/CVE-2024-36010

access.redhat.com/security/cve/CVE-2024-36016

access.redhat.com/security/cve/CVE-2024-36017

access.redhat.com/security/cve/CVE-2024-36020

access.redhat.com/security/cve/CVE-2024-36025

access.redhat.com/security/cve/CVE-2024-36270

access.redhat.com/security/cve/CVE-2024-36286

access.redhat.com/security/cve/CVE-2024-36489

access.redhat.com/security/cve/CVE-2024-36886

access.redhat.com/security/cve/CVE-2024-36889

access.redhat.com/security/cve/CVE-2024-36896

access.redhat.com/security/cve/CVE-2024-36904

access.redhat.com/security/cve/CVE-2024-36905

access.redhat.com/security/cve/CVE-2024-36917

access.redhat.com/security/cve/CVE-2024-36921

access.redhat.com/security/cve/CVE-2024-36927

access.redhat.com/security/cve/CVE-2024-36929

access.redhat.com/security/cve/CVE-2024-36933

access.redhat.com/security/cve/CVE-2024-36940

access.redhat.com/security/cve/CVE-2024-36941

access.redhat.com/security/cve/CVE-2024-36945

access.redhat.com/security/cve/CVE-2024-36950

access.redhat.com/security/cve/CVE-2024-36954

access.redhat.com/security/cve/CVE-2024-36960

access.redhat.com/security/cve/CVE-2024-36971

access.redhat.com/security/cve/CVE-2024-36978

access.redhat.com/security/cve/CVE-2024-36979

access.redhat.com/security/cve/CVE-2024-38538

access.redhat.com/security/cve/CVE-2024-38555

access.redhat.com/security/cve/CVE-2024-38573

access.redhat.com/security/cve/CVE-2024-38575

access.redhat.com/security/cve/CVE-2024-38596

access.redhat.com/security/cve/CVE-2024-38598

access.redhat.com/security/cve/CVE-2024-38615

access.redhat.com/security/cve/CVE-2024-38627

access.redhat.com/security/cve/CVE-2024-39276

access.redhat.com/security/cve/CVE-2024-39472

access.redhat.com/security/cve/CVE-2024-39476

access.redhat.com/security/cve/CVE-2024-39487

access.redhat.com/security/cve/CVE-2024-39502

access.redhat.com/security/cve/CVE-2024-40927

access.redhat.com/security/cve/CVE-2024-40974

bugzilla.redhat.com/2263879

bugzilla.redhat.com/2265645

bugzilla.redhat.com/2265650

bugzilla.redhat.com/2265797

bugzilla.redhat.com/2266341

bugzilla.redhat.com/2266347

bugzilla.redhat.com/2266497

bugzilla.redhat.com/2266594

bugzilla.redhat.com/2267787

bugzilla.redhat.com/2268118

bugzilla.redhat.com/2269070

bugzilla.redhat.com/2269211

bugzilla.redhat.com/2270084

bugzilla.redhat.com/2270100

bugzilla.redhat.com/2270700

bugzilla.redhat.com/2271686

bugzilla.redhat.com/2271688

bugzilla.redhat.com/2272782

bugzilla.redhat.com/2272795

bugzilla.redhat.com/2273109

bugzilla.redhat.com/2273117

bugzilla.redhat.com/2273174

bugzilla.redhat.com/2273236

bugzilla.redhat.com/2273242

bugzilla.redhat.com/2273247

bugzilla.redhat.com/2273268

bugzilla.redhat.com/2273427

bugzilla.redhat.com/2273654

bugzilla.redhat.com/2275565

bugzilla.redhat.com/2275573

bugzilla.redhat.com/2275580

bugzilla.redhat.com/2275694

bugzilla.redhat.com/2275711

bugzilla.redhat.com/2275744

bugzilla.redhat.com/2275748

bugzilla.redhat.com/2275761

bugzilla.redhat.com/2275928

bugzilla.redhat.com/2277166

bugzilla.redhat.com/2277238

bugzilla.redhat.com/2277840

bugzilla.redhat.com/2278176

bugzilla.redhat.com/2278178

bugzilla.redhat.com/2278182

bugzilla.redhat.com/2278218

bugzilla.redhat.com/2278256

bugzilla.redhat.com/2278258

bugzilla.redhat.com/2278277

bugzilla.redhat.com/2278279

bugzilla.redhat.com/2278380

bugzilla.redhat.com/2278484

bugzilla.redhat.com/2278515

bugzilla.redhat.com/2278535

bugzilla.redhat.com/2278539

bugzilla.redhat.com/2278989

bugzilla.redhat.com/2280440

bugzilla.redhat.com/2281054

bugzilla.redhat.com/2281133

bugzilla.redhat.com/2281149

bugzilla.redhat.com/2281189

bugzilla.redhat.com/2281190

bugzilla.redhat.com/2281207

bugzilla.redhat.com/2281215

bugzilla.redhat.com/2281221

bugzilla.redhat.com/2281235

bugzilla.redhat.com/2281268

bugzilla.redhat.com/2281326

bugzilla.redhat.com/2281360

bugzilla.redhat.com/2281510

bugzilla.redhat.com/2281519

bugzilla.redhat.com/2281636

bugzilla.redhat.com/2281641

bugzilla.redhat.com/2281664

bugzilla.redhat.com/2281667

bugzilla.redhat.com/2281672

bugzilla.redhat.com/2281675

bugzilla.redhat.com/2281682

bugzilla.redhat.com/2281725

bugzilla.redhat.com/2281752

bugzilla.redhat.com/2281758

bugzilla.redhat.com/2281819

bugzilla.redhat.com/2281821

bugzilla.redhat.com/2281833

bugzilla.redhat.com/2281938

bugzilla.redhat.com/2281949

bugzilla.redhat.com/2281968

bugzilla.redhat.com/2281989

bugzilla.redhat.com/2282328

bugzilla.redhat.com/2282373

bugzilla.redhat.com/2282479

bugzilla.redhat.com/2282553

bugzilla.redhat.com/2282615

bugzilla.redhat.com/2282623

bugzilla.redhat.com/2282640

bugzilla.redhat.com/2282642

bugzilla.redhat.com/2282645

bugzilla.redhat.com/2282690

bugzilla.redhat.com/2282717

bugzilla.redhat.com/2282719

bugzilla.redhat.com/2282727

bugzilla.redhat.com/2282742

bugzilla.redhat.com/2282743

bugzilla.redhat.com/2282744

bugzilla.redhat.com/2282759

bugzilla.redhat.com/2282763

bugzilla.redhat.com/2282766

bugzilla.redhat.com/2282772

bugzilla.redhat.com/2282780

bugzilla.redhat.com/2282887

bugzilla.redhat.com/2282896

bugzilla.redhat.com/2282923

bugzilla.redhat.com/2282925

bugzilla.redhat.com/2282950

bugzilla.redhat.com/2283401

bugzilla.redhat.com/2283894

bugzilla.redhat.com/2284400

bugzilla.redhat.com/2284417

bugzilla.redhat.com/2284421

bugzilla.redhat.com/2284465

bugzilla.redhat.com/2284474

bugzilla.redhat.com/2284477

bugzilla.redhat.com/2284488

bugzilla.redhat.com/2284496

bugzilla.redhat.com/2284500

bugzilla.redhat.com/2284513

bugzilla.redhat.com/2284519

bugzilla.redhat.com/2284539

bugzilla.redhat.com/2284541

bugzilla.redhat.com/2284556

bugzilla.redhat.com/2284571

bugzilla.redhat.com/2284590

bugzilla.redhat.com/2284625

bugzilla.redhat.com/2290408

bugzilla.redhat.com/2292331

bugzilla.redhat.com/2293078

bugzilla.redhat.com/2293250

bugzilla.redhat.com/2293276

bugzilla.redhat.com/2293312

bugzilla.redhat.com/2293316

bugzilla.redhat.com/2293348

bugzilla.redhat.com/2293367

bugzilla.redhat.com/2293371

bugzilla.redhat.com/2293383

bugzilla.redhat.com/2293418

bugzilla.redhat.com/2293420

bugzilla.redhat.com/2293444

bugzilla.redhat.com/2293461

bugzilla.redhat.com/2293653

bugzilla.redhat.com/2293657

bugzilla.redhat.com/2293684

bugzilla.redhat.com/2293687

bugzilla.redhat.com/2293700

bugzilla.redhat.com/2293711

bugzilla.redhat.com/2294274

bugzilla.redhat.com/2295914

bugzilla.redhat.com/2296067

bugzilla.redhat.com/2297056

bugzilla.redhat.com/2297474

bugzilla.redhat.com/2297511

bugzilla.redhat.com/2297558

bugzilla.redhat.com/2298108

errata.almalinux.org/8/ALSA-2024-5101.html

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

43.7%

JSON

Related for OSV:ALSA-2024:5101