Lucene search

K
redhatRedHatRHSA-2024:3414
HistoryMay 28, 2024 - 1:04 p.m.

(RHSA-2024:3414) Important: kernel-rt security and bug fix update

2024-05-2813:04:14
access.redhat.com
5
kernel-rt
real time linux
security
bug fix
cve-2023-6240
cve-2024-1086
cve-2024-26586
cve-2023-52628
cve-2023-4244
cve-2023-6817
jira:rhel-32673

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.3%

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)

  • kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function (CVE-2024-1086)

  • kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586)

  • kernel: netfilter: nftables: exthdr: fix 4-byte stack OOB write (CVE-2023-52628)

  • kernel: Use-after-free in nft_verdict_dump due to a race between set GC and transaction (CVE-2023-4244)

  • kernel: inactive elements in nft_pipapo_walk (CVE-2023-6817)

Bug Fix(es):

  • kernel-rt: update RT source tree to the latest RHEL-9.0.z Batch 17 (JIRA:RHEL-32673)