Lucene search

GoogleOSV:RLSA-2024:2950

HistoryJun 14, 2024 - 1:59 p.m.

Moderate: kernel-rt security and bug fix update

2024-06-1413:59:36

Google

osv.dev

real time linux

determinism requirements

cvss score

rocky linux 8.10

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.6%

JSON

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

References

bugzilla.redhat.com/show_bug.cgi?id=1731000

bugzilla.redhat.com/show_bug.cgi?id=1746732

bugzilla.redhat.com/show_bug.cgi?id=1888726

bugzilla.redhat.com/show_bug.cgi?id=1999589

bugzilla.redhat.com/show_bug.cgi?id=2039178

bugzilla.redhat.com/show_bug.cgi?id=2043520

bugzilla.redhat.com/show_bug.cgi?id=2044578

bugzilla.redhat.com/show_bug.cgi?id=2150953

bugzilla.redhat.com/show_bug.cgi?id=2151959

bugzilla.redhat.com/show_bug.cgi?id=2177759

bugzilla.redhat.com/show_bug.cgi?id=2179892

bugzilla.redhat.com/show_bug.cgi?id=2213132

bugzilla.redhat.com/show_bug.cgi?id=2218332

bugzilla.redhat.com/show_bug.cgi?id=2219359

bugzilla.redhat.com/show_bug.cgi?id=2221039

bugzilla.redhat.com/show_bug.cgi?id=2221463

bugzilla.redhat.com/show_bug.cgi?id=2221702

bugzilla.redhat.com/show_bug.cgi?id=2226777

bugzilla.redhat.com/show_bug.cgi?id=2226784

bugzilla.redhat.com/show_bug.cgi?id=2226787

bugzilla.redhat.com/show_bug.cgi?id=2226788

bugzilla.redhat.com/show_bug.cgi?id=2230042

bugzilla.redhat.com/show_bug.cgi?id=2231410

bugzilla.redhat.com/show_bug.cgi?id=2235306

bugzilla.redhat.com/show_bug.cgi?id=2239845

bugzilla.redhat.com/show_bug.cgi?id=2239847

bugzilla.redhat.com/show_bug.cgi?id=2244720

bugzilla.redhat.com/show_bug.cgi?id=2250043

bugzilla.redhat.com/show_bug.cgi?id=2253632

bugzilla.redhat.com/show_bug.cgi?id=2254961

bugzilla.redhat.com/show_bug.cgi?id=2254982

bugzilla.redhat.com/show_bug.cgi?id=2255283

bugzilla.redhat.com/show_bug.cgi?id=2256490

bugzilla.redhat.com/show_bug.cgi?id=2256822

bugzilla.redhat.com/show_bug.cgi?id=2257682

bugzilla.redhat.com/show_bug.cgi?id=2257979

bugzilla.redhat.com/show_bug.cgi?id=2265285

bugzilla.redhat.com/show_bug.cgi?id=2265653

bugzilla.redhat.com/show_bug.cgi?id=2267695

bugzilla.redhat.com/show_bug.cgi?id=2267750

bugzilla.redhat.com/show_bug.cgi?id=2267760

bugzilla.redhat.com/show_bug.cgi?id=2267761

bugzilla.redhat.com/show_bug.cgi?id=2269189

bugzilla.redhat.com/show_bug.cgi?id=2269217

bugzilla.redhat.com/show_bug.cgi?id=2270836

bugzilla.redhat.com/show_bug.cgi?id=2270883

bugzilla.redhat.com/show_bug.cgi?id=2272811

errata.rockylinux.org/RLSA-2024:2950

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.6%

JSON

Related for OSV:RLSA-2024:2950