Lucene search

GoogleOSV:ALSA-2024:5102

HistoryAug 08, 2024 - 12:00 a.m.

Important: kernel-rt security update

2024-08-0800:00:00

Google

osv.dev

kernel-rt packages

real time linux kernel

determinism requirements

efivarfs

tracing

ext4

net/sched

stmmac

efi

quota

tipc

sunrpc

dmaengine/idxd

x86/fpu

dyndbg

net/sched

x86/mce

platform/x86

tipc

net/mlx5

nfsv4.2

wifi

scsi

block

cfg80211

netfilter

mm/hugetlb

mlxsw

net/ieee802154

mmc

sdio

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

43.7%

JSON

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert “net/mlx5: Block entering switchdev mode with ns inconsistency” (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

References

access.redhat.com/errata/RHSA-2024:5102

access.redhat.com/security/cve/CVE-2021-46939

access.redhat.com/security/cve/CVE-2021-47257

access.redhat.com/security/cve/CVE-2021-47284

access.redhat.com/security/cve/CVE-2021-47304

access.redhat.com/security/cve/CVE-2021-47373

access.redhat.com/security/cve/CVE-2021-47408

access.redhat.com/security/cve/CVE-2021-47461

access.redhat.com/security/cve/CVE-2021-47468

access.redhat.com/security/cve/CVE-2021-47491

access.redhat.com/security/cve/CVE-2021-47548

access.redhat.com/security/cve/CVE-2021-47579

access.redhat.com/security/cve/CVE-2021-47624

access.redhat.com/security/cve/CVE-2022-48632

access.redhat.com/security/cve/CVE-2022-48743

access.redhat.com/security/cve/CVE-2022-48747

access.redhat.com/security/cve/CVE-2022-48757

access.redhat.com/security/cve/CVE-2023-52463

access.redhat.com/security/cve/CVE-2023-52469

access.redhat.com/security/cve/CVE-2023-52471

access.redhat.com/security/cve/CVE-2023-52486

access.redhat.com/security/cve/CVE-2023-52530

access.redhat.com/security/cve/CVE-2023-52619

access.redhat.com/security/cve/CVE-2023-52622

access.redhat.com/security/cve/CVE-2023-52623

access.redhat.com/security/cve/CVE-2023-52648

access.redhat.com/security/cve/CVE-2023-52653

access.redhat.com/security/cve/CVE-2023-52658

access.redhat.com/security/cve/CVE-2023-52662

access.redhat.com/security/cve/CVE-2023-52679

access.redhat.com/security/cve/CVE-2023-52707

access.redhat.com/security/cve/CVE-2023-52730

access.redhat.com/security/cve/CVE-2023-52756

access.redhat.com/security/cve/CVE-2023-52762

access.redhat.com/security/cve/CVE-2023-52764

access.redhat.com/security/cve/CVE-2023-52777

access.redhat.com/security/cve/CVE-2023-52784

access.redhat.com/security/cve/CVE-2023-52791

access.redhat.com/security/cve/CVE-2023-52796

access.redhat.com/security/cve/CVE-2023-52803

access.redhat.com/security/cve/CVE-2023-52811

access.redhat.com/security/cve/CVE-2023-52832

access.redhat.com/security/cve/CVE-2023-52834

access.redhat.com/security/cve/CVE-2023-52845

access.redhat.com/security/cve/CVE-2023-52847

access.redhat.com/security/cve/CVE-2023-52864

access.redhat.com/security/cve/CVE-2024-21823

access.redhat.com/security/cve/CVE-2024-2201

access.redhat.com/security/cve/CVE-2024-25739

access.redhat.com/security/cve/CVE-2024-26586

access.redhat.com/security/cve/CVE-2024-26614

access.redhat.com/security/cve/CVE-2024-26640

access.redhat.com/security/cve/CVE-2024-26660

access.redhat.com/security/cve/CVE-2024-26669

access.redhat.com/security/cve/CVE-2024-26686

access.redhat.com/security/cve/CVE-2024-26704

access.redhat.com/security/cve/CVE-2024-26733

access.redhat.com/security/cve/CVE-2024-26740

access.redhat.com/security/cve/CVE-2024-26772

access.redhat.com/security/cve/CVE-2024-26773

access.redhat.com/security/cve/CVE-2024-26802

access.redhat.com/security/cve/CVE-2024-26810

access.redhat.com/security/cve/CVE-2024-26837

access.redhat.com/security/cve/CVE-2024-26840

access.redhat.com/security/cve/CVE-2024-26843

access.redhat.com/security/cve/CVE-2024-26852

access.redhat.com/security/cve/CVE-2024-26853

access.redhat.com/security/cve/CVE-2024-26870

access.redhat.com/security/cve/CVE-2024-26878

access.redhat.com/security/cve/CVE-2024-26921

access.redhat.com/security/cve/CVE-2024-26925

access.redhat.com/security/cve/CVE-2024-26940

access.redhat.com/security/cve/CVE-2024-26958

access.redhat.com/security/cve/CVE-2024-26960

access.redhat.com/security/cve/CVE-2024-26961

access.redhat.com/security/cve/CVE-2024-27010

access.redhat.com/security/cve/CVE-2024-27011

access.redhat.com/security/cve/CVE-2024-27019

access.redhat.com/security/cve/CVE-2024-27020

access.redhat.com/security/cve/CVE-2024-27025

access.redhat.com/security/cve/CVE-2024-27065

access.redhat.com/security/cve/CVE-2024-27388

access.redhat.com/security/cve/CVE-2024-27395

access.redhat.com/security/cve/CVE-2024-27434

access.redhat.com/security/cve/CVE-2024-31076

access.redhat.com/security/cve/CVE-2024-33621

access.redhat.com/security/cve/CVE-2024-35790

access.redhat.com/security/cve/CVE-2024-35801

access.redhat.com/security/cve/CVE-2024-35807

access.redhat.com/security/cve/CVE-2024-35810

access.redhat.com/security/cve/CVE-2024-35814

access.redhat.com/security/cve/CVE-2024-35847

access.redhat.com/security/cve/CVE-2024-35876

access.redhat.com/security/cve/CVE-2024-35893

access.redhat.com/security/cve/CVE-2024-35896

access.redhat.com/security/cve/CVE-2024-35897

access.redhat.com/security/cve/CVE-2024-35899

access.redhat.com/security/cve/CVE-2024-35900

access.redhat.com/security/cve/CVE-2024-35910

access.redhat.com/security/cve/CVE-2024-35912

access.redhat.com/security/cve/CVE-2024-35924

access.redhat.com/security/cve/CVE-2024-35925

access.redhat.com/security/cve/CVE-2024-35930

access.redhat.com/security/cve/CVE-2024-35937

access.redhat.com/security/cve/CVE-2024-35938

access.redhat.com/security/cve/CVE-2024-35946

access.redhat.com/security/cve/CVE-2024-35947

access.redhat.com/security/cve/CVE-2024-35952

access.redhat.com/security/cve/CVE-2024-36000

access.redhat.com/security/cve/CVE-2024-36005

access.redhat.com/security/cve/CVE-2024-36006

access.redhat.com/security/cve/CVE-2024-36010

access.redhat.com/security/cve/CVE-2024-36016

access.redhat.com/security/cve/CVE-2024-36017

access.redhat.com/security/cve/CVE-2024-36020

access.redhat.com/security/cve/CVE-2024-36025

access.redhat.com/security/cve/CVE-2024-36270

access.redhat.com/security/cve/CVE-2024-36286

access.redhat.com/security/cve/CVE-2024-36489

access.redhat.com/security/cve/CVE-2024-36886

access.redhat.com/security/cve/CVE-2024-36889

access.redhat.com/security/cve/CVE-2024-36896

access.redhat.com/security/cve/CVE-2024-36904

access.redhat.com/security/cve/CVE-2024-36905

access.redhat.com/security/cve/CVE-2024-36917

access.redhat.com/security/cve/CVE-2024-36921

access.redhat.com/security/cve/CVE-2024-36927

access.redhat.com/security/cve/CVE-2024-36929

access.redhat.com/security/cve/CVE-2024-36933

access.redhat.com/security/cve/CVE-2024-36940

access.redhat.com/security/cve/CVE-2024-36941

access.redhat.com/security/cve/CVE-2024-36950

access.redhat.com/security/cve/CVE-2024-36954

access.redhat.com/security/cve/CVE-2024-36960

access.redhat.com/security/cve/CVE-2024-36971

access.redhat.com/security/cve/CVE-2024-36978

access.redhat.com/security/cve/CVE-2024-36979

access.redhat.com/security/cve/CVE-2024-38538

access.redhat.com/security/cve/CVE-2024-38555

access.redhat.com/security/cve/CVE-2024-38573

access.redhat.com/security/cve/CVE-2024-38575

access.redhat.com/security/cve/CVE-2024-38596

access.redhat.com/security/cve/CVE-2024-38615

access.redhat.com/security/cve/CVE-2024-38627

access.redhat.com/security/cve/CVE-2024-39276

access.redhat.com/security/cve/CVE-2024-39472

access.redhat.com/security/cve/CVE-2024-39476

access.redhat.com/security/cve/CVE-2024-39487

access.redhat.com/security/cve/CVE-2024-39502

access.redhat.com/security/cve/CVE-2024-40927

bugzilla.redhat.com/2263879

bugzilla.redhat.com/2265645

bugzilla.redhat.com/2265797

bugzilla.redhat.com/2266341

bugzilla.redhat.com/2266347

bugzilla.redhat.com/2266497

bugzilla.redhat.com/2267787

bugzilla.redhat.com/2268118

bugzilla.redhat.com/2269070

bugzilla.redhat.com/2269211

bugzilla.redhat.com/2270084

bugzilla.redhat.com/2270100

bugzilla.redhat.com/2271686

bugzilla.redhat.com/2271688

bugzilla.redhat.com/2272782

bugzilla.redhat.com/2272795

bugzilla.redhat.com/2273109

bugzilla.redhat.com/2273174

bugzilla.redhat.com/2273236

bugzilla.redhat.com/2273242

bugzilla.redhat.com/2273247

bugzilla.redhat.com/2273268

bugzilla.redhat.com/2273427

bugzilla.redhat.com/2273654

bugzilla.redhat.com/2275565

bugzilla.redhat.com/2275573

bugzilla.redhat.com/2275580

bugzilla.redhat.com/2275694

bugzilla.redhat.com/2275711

bugzilla.redhat.com/2275748

bugzilla.redhat.com/2275761

bugzilla.redhat.com/2275928

bugzilla.redhat.com/2277166

bugzilla.redhat.com/2277238

bugzilla.redhat.com/2277840

bugzilla.redhat.com/2278176

bugzilla.redhat.com/2278178

bugzilla.redhat.com/2278182

bugzilla.redhat.com/2278218

bugzilla.redhat.com/2278256

bugzilla.redhat.com/2278258

bugzilla.redhat.com/2278277

bugzilla.redhat.com/2278279

bugzilla.redhat.com/2278380

bugzilla.redhat.com/2278484

bugzilla.redhat.com/2278515

bugzilla.redhat.com/2278535

bugzilla.redhat.com/2278539

bugzilla.redhat.com/2278989

bugzilla.redhat.com/2280440

bugzilla.redhat.com/2281054

bugzilla.redhat.com/2281133

bugzilla.redhat.com/2281149

bugzilla.redhat.com/2281207

bugzilla.redhat.com/2281215

bugzilla.redhat.com/2281221

bugzilla.redhat.com/2281235

bugzilla.redhat.com/2281268

bugzilla.redhat.com/2281326

bugzilla.redhat.com/2281360

bugzilla.redhat.com/2281510

bugzilla.redhat.com/2281519

bugzilla.redhat.com/2281636

bugzilla.redhat.com/2281641

bugzilla.redhat.com/2281664

bugzilla.redhat.com/2281667

bugzilla.redhat.com/2281672

bugzilla.redhat.com/2281675

bugzilla.redhat.com/2281682

bugzilla.redhat.com/2281725

bugzilla.redhat.com/2281752

bugzilla.redhat.com/2281758

bugzilla.redhat.com/2281819

bugzilla.redhat.com/2281821

bugzilla.redhat.com/2281833

bugzilla.redhat.com/2281938

bugzilla.redhat.com/2281949

bugzilla.redhat.com/2281968

bugzilla.redhat.com/2281989

bugzilla.redhat.com/2282328

bugzilla.redhat.com/2282373

bugzilla.redhat.com/2282479

bugzilla.redhat.com/2282553

bugzilla.redhat.com/2282615

bugzilla.redhat.com/2282623

bugzilla.redhat.com/2282640

bugzilla.redhat.com/2282642

bugzilla.redhat.com/2282645

bugzilla.redhat.com/2282717

bugzilla.redhat.com/2282719

bugzilla.redhat.com/2282727

bugzilla.redhat.com/2282742

bugzilla.redhat.com/2282743

bugzilla.redhat.com/2282744

bugzilla.redhat.com/2282759

bugzilla.redhat.com/2282763

bugzilla.redhat.com/2282766

bugzilla.redhat.com/2282772

bugzilla.redhat.com/2282780

bugzilla.redhat.com/2282887

bugzilla.redhat.com/2282896

bugzilla.redhat.com/2282923

bugzilla.redhat.com/2282925

bugzilla.redhat.com/2282950

bugzilla.redhat.com/2283401

bugzilla.redhat.com/2283894

bugzilla.redhat.com/2284400

bugzilla.redhat.com/2284417

bugzilla.redhat.com/2284421

bugzilla.redhat.com/2284474

bugzilla.redhat.com/2284477

bugzilla.redhat.com/2284488

bugzilla.redhat.com/2284496

bugzilla.redhat.com/2284500

bugzilla.redhat.com/2284513

bugzilla.redhat.com/2284519

bugzilla.redhat.com/2284539

bugzilla.redhat.com/2284541

bugzilla.redhat.com/2284556

bugzilla.redhat.com/2284571

bugzilla.redhat.com/2284590

bugzilla.redhat.com/2284625

bugzilla.redhat.com/2290408

bugzilla.redhat.com/2292331

bugzilla.redhat.com/2293078

bugzilla.redhat.com/2293250

bugzilla.redhat.com/2293276

bugzilla.redhat.com/2293312

bugzilla.redhat.com/2293316

bugzilla.redhat.com/2293348

bugzilla.redhat.com/2293371

bugzilla.redhat.com/2293383

bugzilla.redhat.com/2293418

bugzilla.redhat.com/2293420

bugzilla.redhat.com/2293444

bugzilla.redhat.com/2293461

bugzilla.redhat.com/2293653

bugzilla.redhat.com/2293657

bugzilla.redhat.com/2293684

bugzilla.redhat.com/2293687

bugzilla.redhat.com/2293700

bugzilla.redhat.com/2293711

bugzilla.redhat.com/2294274

bugzilla.redhat.com/2295914

bugzilla.redhat.com/2296067

bugzilla.redhat.com/2297056

bugzilla.redhat.com/2297474

bugzilla.redhat.com/2297511

bugzilla.redhat.com/2298108

errata.almalinux.org/8/ALSA-2024-5102.html

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

43.7%

JSON

Related for OSV:ALSA-2024:5102