(RHSA-2024:2845) Moderate: kernel security and bug fix update

2024-05-1500:13:23

access.redhat.com

rhsa-2024

cve-2024-25744

cve-2023-52628

jira:rhel-30266

jira:rhel-31090

linux operating system

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

16.0%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
kernel: netfilter: nftables: exthdr: fix 4-byte stack OOB write (CVE-2023-52628)

Bug Fix(es):

kernel: untrusted VMM can trigger int80 syscall handling (JIRA:RHEL-30266)
kernel: netfilter: nftables: exthdr: fix 4-byte stack OOB write (JIRA:RHEL-31090)

OSVersionArchitecturePackageVersionFilename
RedHat9s390xbpftool-debuginfo< 7.0.0-284.66.1.el9_2bpftool-debuginfo-7.0.0-284.66.1.el9_2.s390x.rpm
RedHat9x86_64kernel-debug-debuginfo< 5.14.0-284.66.1.el9_2kernel-debug-debuginfo-5.14.0-284.66.1.el9_2.x86_64.rpm
RedHat9aarch64kernel-modules< 5.14.0-284.66.1.el9_2kernel-modules-5.14.0-284.66.1.el9_2.aarch64.rpm
RedHat9aarch64kernel-64k-debug< 5.14.0-284.66.1.el9_2kernel-64k-debug-5.14.0-284.66.1.el9_2.aarch64.rpm
RedHat9aarch64kernel-modules-extra< 5.14.0-284.66.1.el9_2kernel-modules-extra-5.14.0-284.66.1.el9_2.aarch64.rpm
RedHat9ppc64lekernel-tools-debuginfo< 5.14.0-284.66.1.el9_2kernel-tools-debuginfo-5.14.0-284.66.1.el9_2.ppc64le.rpm
RedHat9s390xrtla< 5.14.0-284.66.1.el9_2rtla-5.14.0-284.66.1.el9_2.s390x.rpm
RedHat9s390xkernel-zfcpdump-debuginfo< 5.14.0-284.66.1.el9_2kernel-zfcpdump-debuginfo-5.14.0-284.66.1.el9_2.s390x.rpm
RedHat9s390xkernel-core< 5.14.0-284.66.1.el9_2kernel-core-5.14.0-284.66.1.el9_2.s390x.rpm
RedHat9ppc64lekernel-debug-modules-core< 5.14.0-284.66.1.el9_2kernel-debug-modules-core-5.14.0-284.66.1.el9_2.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	s390x	bpftool-debuginfo	< 7.0.0-284.66.1.el9_2	bpftool-debuginfo-7.0.0-284.66.1.el9_2.s390x.rpm
RedHat	9	x86_64	kernel-debug-debuginfo	< 5.14.0-284.66.1.el9_2	kernel-debug-debuginfo-5.14.0-284.66.1.el9_2.x86_64.rpm
RedHat	9	aarch64	kernel-modules	< 5.14.0-284.66.1.el9_2	kernel-modules-5.14.0-284.66.1.el9_2.aarch64.rpm
RedHat	9	aarch64	kernel-64k-debug	< 5.14.0-284.66.1.el9_2	kernel-64k-debug-5.14.0-284.66.1.el9_2.aarch64.rpm
RedHat	9	aarch64	kernel-modules-extra	< 5.14.0-284.66.1.el9_2	kernel-modules-extra-5.14.0-284.66.1.el9_2.aarch64.rpm
RedHat	9	ppc64le	kernel-tools-debuginfo	< 5.14.0-284.66.1.el9_2	kernel-tools-debuginfo-5.14.0-284.66.1.el9_2.ppc64le.rpm
RedHat	9	s390x	rtla	< 5.14.0-284.66.1.el9_2	rtla-5.14.0-284.66.1.el9_2.s390x.rpm
RedHat	9	s390x	kernel-zfcpdump-debuginfo	< 5.14.0-284.66.1.el9_2	kernel-zfcpdump-debuginfo-5.14.0-284.66.1.el9_2.s390x.rpm
RedHat	9	s390x	kernel-core	< 5.14.0-284.66.1.el9_2	kernel-core-5.14.0-284.66.1.el9_2.s390x.rpm
RedHat	9	ppc64le	kernel-debug-modules-core	< 5.14.0-284.66.1.el9_2	kernel-debug-modules-core-5.14.0-284.66.1.el9_2.ppc64le.rpm