(RHSA-2024:3306) Moderate: kernel security and bug fix update

2024-05-2305:51:19

access.redhat.com

rhsa-2024-3306

linux kernel

netfilter

nf_tables

cve-2024-26643

cve-2024-26642

cve-2024-26673

cve-2024-26804

ip tunnel

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.1%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673)
kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)

OSVersionArchitecturePackageVersionFilename
RedHat9ppc64lekernel-debug-devel-matched< 5.14.0-427.18.1.el9_4kernel-debug-devel-matched-5.14.0-427.18.1.el9_4.ppc64le.rpm
RedHat9x86_64rv< 5.14.0-427.18.1.el9_4rv-5.14.0-427.18.1.el9_4.x86_64.rpm
RedHat9x86_64kernel-rt-debug-modules-extra< 5.14.0-427.18.1.el9_4kernel-rt-debug-modules-extra-5.14.0-427.18.1.el9_4.x86_64.rpm
RedHat9s390xkernel-debuginfo-common-s390x< 5.14.0-427.18.1.el9_4kernel-debuginfo-common-s390x-5.14.0-427.18.1.el9_4.s390x.rpm
RedHat9s390xbpftool< 7.3.0-427.18.1.el9_4bpftool-7.3.0-427.18.1.el9_4.s390x.rpm
RedHat9x86_64kernel-rt-debug-modules-core< 5.14.0-427.18.1.el9_4kernel-rt-debug-modules-core-5.14.0-427.18.1.el9_4.x86_64.rpm
RedHat9s390xkernel-debug-modules-core< 5.14.0-427.18.1.el9_4kernel-debug-modules-core-5.14.0-427.18.1.el9_4.s390x.rpm
RedHat9x86_64libperf< 5.14.0-427.18.1.el9_4libperf-5.14.0-427.18.1.el9_4.x86_64.rpm
RedHat9aarch64kernel-rt-debug-debuginfo< 5.14.0-427.18.1.el9_4kernel-rt-debug-debuginfo-5.14.0-427.18.1.el9_4.aarch64.rpm
RedHat9aarch64kernel-cross-headers< 5.14.0-427.18.1.el9_4kernel-cross-headers-5.14.0-427.18.1.el9_4.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	ppc64le	kernel-debug-devel-matched	< 5.14.0-427.18.1.el9_4	kernel-debug-devel-matched-5.14.0-427.18.1.el9_4.ppc64le.rpm
RedHat	9	x86_64	rv	< 5.14.0-427.18.1.el9_4	rv-5.14.0-427.18.1.el9_4.x86_64.rpm
RedHat	9	x86_64	kernel-rt-debug-modules-extra	< 5.14.0-427.18.1.el9_4	kernel-rt-debug-modules-extra-5.14.0-427.18.1.el9_4.x86_64.rpm
RedHat	9	s390x	kernel-debuginfo-common-s390x	< 5.14.0-427.18.1.el9_4	kernel-debuginfo-common-s390x-5.14.0-427.18.1.el9_4.s390x.rpm
RedHat	9	s390x	bpftool	< 7.3.0-427.18.1.el9_4	bpftool-7.3.0-427.18.1.el9_4.s390x.rpm
RedHat	9	x86_64	kernel-rt-debug-modules-core	< 5.14.0-427.18.1.el9_4	kernel-rt-debug-modules-core-5.14.0-427.18.1.el9_4.x86_64.rpm
RedHat	9	s390x	kernel-debug-modules-core	< 5.14.0-427.18.1.el9_4	kernel-debug-modules-core-5.14.0-427.18.1.el9_4.s390x.rpm
RedHat	9	x86_64	libperf	< 5.14.0-427.18.1.el9_4	libperf-5.14.0-427.18.1.el9_4.x86_64.rpm
RedHat	9	aarch64	kernel-rt-debug-debuginfo	< 5.14.0-427.18.1.el9_4	kernel-rt-debug-debuginfo-5.14.0-427.18.1.el9_4.aarch64.rpm
RedHat	9	aarch64	kernel-cross-headers	< 5.14.0-427.18.1.el9_4	kernel-cross-headers-5.14.0-427.18.1.el9_4.aarch64.rpm