CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
43.7%
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert “net/mlx5: Block entering switchdev mode with ns inconsistency” (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
bugzilla.redhat.com/show_bug.cgi?id=2263879
bugzilla.redhat.com/show_bug.cgi?id=2265645
bugzilla.redhat.com/show_bug.cgi?id=2265797
bugzilla.redhat.com/show_bug.cgi?id=2266341
bugzilla.redhat.com/show_bug.cgi?id=2266347
bugzilla.redhat.com/show_bug.cgi?id=2266497
bugzilla.redhat.com/show_bug.cgi?id=2267787
bugzilla.redhat.com/show_bug.cgi?id=2268118
bugzilla.redhat.com/show_bug.cgi?id=2269070
bugzilla.redhat.com/show_bug.cgi?id=2269211
bugzilla.redhat.com/show_bug.cgi?id=2270084
bugzilla.redhat.com/show_bug.cgi?id=2270100
bugzilla.redhat.com/show_bug.cgi?id=2271686
bugzilla.redhat.com/show_bug.cgi?id=2271688
bugzilla.redhat.com/show_bug.cgi?id=2272782
bugzilla.redhat.com/show_bug.cgi?id=2272795
bugzilla.redhat.com/show_bug.cgi?id=2273109
bugzilla.redhat.com/show_bug.cgi?id=2273174
bugzilla.redhat.com/show_bug.cgi?id=2273236
bugzilla.redhat.com/show_bug.cgi?id=2273242
bugzilla.redhat.com/show_bug.cgi?id=2273247
bugzilla.redhat.com/show_bug.cgi?id=2273268
bugzilla.redhat.com/show_bug.cgi?id=2273427
bugzilla.redhat.com/show_bug.cgi?id=2273654
bugzilla.redhat.com/show_bug.cgi?id=2275565
bugzilla.redhat.com/show_bug.cgi?id=2275573
bugzilla.redhat.com/show_bug.cgi?id=2275580
bugzilla.redhat.com/show_bug.cgi?id=2275694
bugzilla.redhat.com/show_bug.cgi?id=2275711
bugzilla.redhat.com/show_bug.cgi?id=2275748
bugzilla.redhat.com/show_bug.cgi?id=2275761
bugzilla.redhat.com/show_bug.cgi?id=2275928
bugzilla.redhat.com/show_bug.cgi?id=2277166
bugzilla.redhat.com/show_bug.cgi?id=2277238
bugzilla.redhat.com/show_bug.cgi?id=2277840
bugzilla.redhat.com/show_bug.cgi?id=2278176
bugzilla.redhat.com/show_bug.cgi?id=2278178
bugzilla.redhat.com/show_bug.cgi?id=2278182
bugzilla.redhat.com/show_bug.cgi?id=2278218
bugzilla.redhat.com/show_bug.cgi?id=2278256
bugzilla.redhat.com/show_bug.cgi?id=2278258
bugzilla.redhat.com/show_bug.cgi?id=2278277
bugzilla.redhat.com/show_bug.cgi?id=2278279
bugzilla.redhat.com/show_bug.cgi?id=2278380
bugzilla.redhat.com/show_bug.cgi?id=2278484
bugzilla.redhat.com/show_bug.cgi?id=2278515
bugzilla.redhat.com/show_bug.cgi?id=2278535
bugzilla.redhat.com/show_bug.cgi?id=2278539
bugzilla.redhat.com/show_bug.cgi?id=2278989
bugzilla.redhat.com/show_bug.cgi?id=2280440
bugzilla.redhat.com/show_bug.cgi?id=2281054
bugzilla.redhat.com/show_bug.cgi?id=2281133
bugzilla.redhat.com/show_bug.cgi?id=2281149
bugzilla.redhat.com/show_bug.cgi?id=2281207
bugzilla.redhat.com/show_bug.cgi?id=2281215
bugzilla.redhat.com/show_bug.cgi?id=2281221
bugzilla.redhat.com/show_bug.cgi?id=2281235
bugzilla.redhat.com/show_bug.cgi?id=2281268
bugzilla.redhat.com/show_bug.cgi?id=2281326
bugzilla.redhat.com/show_bug.cgi?id=2281360
bugzilla.redhat.com/show_bug.cgi?id=2281510
bugzilla.redhat.com/show_bug.cgi?id=2281519
bugzilla.redhat.com/show_bug.cgi?id=2281636
bugzilla.redhat.com/show_bug.cgi?id=2281641
bugzilla.redhat.com/show_bug.cgi?id=2281664
bugzilla.redhat.com/show_bug.cgi?id=2281667
bugzilla.redhat.com/show_bug.cgi?id=2281672
bugzilla.redhat.com/show_bug.cgi?id=2281675
bugzilla.redhat.com/show_bug.cgi?id=2281682
bugzilla.redhat.com/show_bug.cgi?id=2281725
bugzilla.redhat.com/show_bug.cgi?id=2281752
bugzilla.redhat.com/show_bug.cgi?id=2281758
bugzilla.redhat.com/show_bug.cgi?id=2281819
bugzilla.redhat.com/show_bug.cgi?id=2281821
bugzilla.redhat.com/show_bug.cgi?id=2281833
bugzilla.redhat.com/show_bug.cgi?id=2281938
bugzilla.redhat.com/show_bug.cgi?id=2281949
bugzilla.redhat.com/show_bug.cgi?id=2281968
bugzilla.redhat.com/show_bug.cgi?id=2281989
bugzilla.redhat.com/show_bug.cgi?id=2282328
bugzilla.redhat.com/show_bug.cgi?id=2282373
bugzilla.redhat.com/show_bug.cgi?id=2282479
bugzilla.redhat.com/show_bug.cgi?id=2282553
bugzilla.redhat.com/show_bug.cgi?id=2282615
bugzilla.redhat.com/show_bug.cgi?id=2282623
bugzilla.redhat.com/show_bug.cgi?id=2282640
bugzilla.redhat.com/show_bug.cgi?id=2282642
bugzilla.redhat.com/show_bug.cgi?id=2282645
bugzilla.redhat.com/show_bug.cgi?id=2282717
bugzilla.redhat.com/show_bug.cgi?id=2282719
bugzilla.redhat.com/show_bug.cgi?id=2282727
bugzilla.redhat.com/show_bug.cgi?id=2282742
bugzilla.redhat.com/show_bug.cgi?id=2282743
bugzilla.redhat.com/show_bug.cgi?id=2282744
bugzilla.redhat.com/show_bug.cgi?id=2282759
bugzilla.redhat.com/show_bug.cgi?id=2282763
bugzilla.redhat.com/show_bug.cgi?id=2282766
bugzilla.redhat.com/show_bug.cgi?id=2282772
bugzilla.redhat.com/show_bug.cgi?id=2282780
bugzilla.redhat.com/show_bug.cgi?id=2282887
bugzilla.redhat.com/show_bug.cgi?id=2282896
bugzilla.redhat.com/show_bug.cgi?id=2282923
bugzilla.redhat.com/show_bug.cgi?id=2282925
bugzilla.redhat.com/show_bug.cgi?id=2282950
bugzilla.redhat.com/show_bug.cgi?id=2283401
bugzilla.redhat.com/show_bug.cgi?id=2283894
bugzilla.redhat.com/show_bug.cgi?id=2284400
bugzilla.redhat.com/show_bug.cgi?id=2284417
bugzilla.redhat.com/show_bug.cgi?id=2284421
bugzilla.redhat.com/show_bug.cgi?id=2284474
bugzilla.redhat.com/show_bug.cgi?id=2284477
bugzilla.redhat.com/show_bug.cgi?id=2284488
bugzilla.redhat.com/show_bug.cgi?id=2284496
bugzilla.redhat.com/show_bug.cgi?id=2284500
bugzilla.redhat.com/show_bug.cgi?id=2284513
bugzilla.redhat.com/show_bug.cgi?id=2284519
bugzilla.redhat.com/show_bug.cgi?id=2284539
bugzilla.redhat.com/show_bug.cgi?id=2284541
bugzilla.redhat.com/show_bug.cgi?id=2284556
bugzilla.redhat.com/show_bug.cgi?id=2284571
bugzilla.redhat.com/show_bug.cgi?id=2284590
bugzilla.redhat.com/show_bug.cgi?id=2284625
bugzilla.redhat.com/show_bug.cgi?id=2290408
bugzilla.redhat.com/show_bug.cgi?id=2292331
bugzilla.redhat.com/show_bug.cgi?id=2293078
bugzilla.redhat.com/show_bug.cgi?id=2293250
bugzilla.redhat.com/show_bug.cgi?id=2293276
bugzilla.redhat.com/show_bug.cgi?id=2293312
bugzilla.redhat.com/show_bug.cgi?id=2293316
bugzilla.redhat.com/show_bug.cgi?id=2293348
bugzilla.redhat.com/show_bug.cgi?id=2293371
bugzilla.redhat.com/show_bug.cgi?id=2293383
bugzilla.redhat.com/show_bug.cgi?id=2293418
bugzilla.redhat.com/show_bug.cgi?id=2293420
bugzilla.redhat.com/show_bug.cgi?id=2293444
bugzilla.redhat.com/show_bug.cgi?id=2293461
bugzilla.redhat.com/show_bug.cgi?id=2293653
bugzilla.redhat.com/show_bug.cgi?id=2293657
bugzilla.redhat.com/show_bug.cgi?id=2293684
bugzilla.redhat.com/show_bug.cgi?id=2293687
bugzilla.redhat.com/show_bug.cgi?id=2293700
bugzilla.redhat.com/show_bug.cgi?id=2293711
bugzilla.redhat.com/show_bug.cgi?id=2294274
bugzilla.redhat.com/show_bug.cgi?id=2295914
bugzilla.redhat.com/show_bug.cgi?id=2296067
bugzilla.redhat.com/show_bug.cgi?id=2297056
bugzilla.redhat.com/show_bug.cgi?id=2297474
bugzilla.redhat.com/show_bug.cgi?id=2298108
errata.rockylinux.org/RLSA-2024:5102
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
43.7%