(RHSA-2024:2582) Moderate: kernel security and bug fix update

2024-04-3014:02:37

access.redhat.com

kernel

security

bug fix

use-after-free

stack corruption

divide error

l2cap_sock_release

mlxsw_spectrum_acl_tcam

netfilter

sched_membarrier

cve-2023-40283

cve-2024-26586

cve-2021-46915

cve-2024-26602

jira

rhel 8.4

intel i40e driver

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

Percentile

5.1%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283)
kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586)
kernel: netfilter: divide error in nft_limit_init (CVE-2021-46915)
kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602)

Bug Fix(es):

kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (JIRA:RHEL-18996)
rbd: don’t move requests to the running list on errors [8.x] (JIRA:RHEL-24201)
TRIAGE CVE-2021-46915 kernel: netfilter: divide error in nft_limit_init (JIRA:RHEL-28179)
[RHEL 8.4] Soft Lockups from BZ-2174623 hit on RHEL 8.4 (JIRA:RHEL-16035)
kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (JIRA:RHEL-26386)
kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (JIRA:RHEL-29181)
Intel i40e driver performance issue (JIRA:RHEL-30402)

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64kernel-debug< 4.18.0-305.130.1.el8_4kernel-debug-4.18.0-305.130.1.el8_4.x86_64.rpm
RedHat8x86_64kernel-headers< 4.18.0-305.130.1.el8_4kernel-headers-4.18.0-305.130.1.el8_4.x86_64.rpm
RedHat8x86_64kernel-debug-devel< 4.18.0-305.130.1.el8_4kernel-debug-devel-4.18.0-305.130.1.el8_4.x86_64.rpm
RedHat8x86_64kernel-modules-extra< 4.18.0-305.130.1.el8_4kernel-modules-extra-4.18.0-305.130.1.el8_4.x86_64.rpm
RedHat8x86_64kernel-debuginfo-common-x86_64< 4.18.0-305.130.1.el8_4kernel-debuginfo-common-x86_64-4.18.0-305.130.1.el8_4.x86_64.rpm
RedHat8ppc64lekernel-debuginfo< 4.18.0-305.130.1.el8_4kernel-debuginfo-4.18.0-305.130.1.el8_4.ppc64le.rpm
RedHat8x86_64kernel-tools-libs< 4.18.0-305.130.1.el8_4kernel-tools-libs-4.18.0-305.130.1.el8_4.x86_64.rpm
RedHat8ppc64lepython3-perf< 4.18.0-305.130.1.el8_4python3-perf-4.18.0-305.130.1.el8_4.ppc64le.rpm
RedHat8ppc64leperf< 4.18.0-305.130.1.el8_4perf-4.18.0-305.130.1.el8_4.ppc64le.rpm
RedHat8noarchkernel-abi-stablelists< 4.18.0-305.130.1.el8_4kernel-abi-stablelists-4.18.0-305.130.1.el8_4.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	x86_64	kernel-debug	< 4.18.0-305.130.1.el8_4	kernel-debug-4.18.0-305.130.1.el8_4.x86_64.rpm
RedHat	8	x86_64	kernel-headers	< 4.18.0-305.130.1.el8_4	kernel-headers-4.18.0-305.130.1.el8_4.x86_64.rpm
RedHat	8	x86_64	kernel-debug-devel	< 4.18.0-305.130.1.el8_4	kernel-debug-devel-4.18.0-305.130.1.el8_4.x86_64.rpm
RedHat	8	x86_64	kernel-modules-extra	< 4.18.0-305.130.1.el8_4	kernel-modules-extra-4.18.0-305.130.1.el8_4.x86_64.rpm
RedHat	8	x86_64	kernel-debuginfo-common-x86_64	< 4.18.0-305.130.1.el8_4	kernel-debuginfo-common-x86_64-4.18.0-305.130.1.el8_4.x86_64.rpm
RedHat	8	ppc64le	kernel-debuginfo	< 4.18.0-305.130.1.el8_4	kernel-debuginfo-4.18.0-305.130.1.el8_4.ppc64le.rpm
RedHat	8	x86_64	kernel-tools-libs	< 4.18.0-305.130.1.el8_4	kernel-tools-libs-4.18.0-305.130.1.el8_4.x86_64.rpm
RedHat	8	ppc64le	python3-perf	< 4.18.0-305.130.1.el8_4	python3-perf-4.18.0-305.130.1.el8_4.ppc64le.rpm
RedHat	8	ppc64le	perf	< 4.18.0-305.130.1.el8_4	perf-4.18.0-305.130.1.el8_4.ppc64le.rpm
RedHat	8	noarch	kernel-abi-stablelists	< 4.18.0-305.130.1.el8_4	kernel-abi-stablelists-4.18.0-305.130.1.el8_4.noarch.rpm