(RHSA-2024:3462) Moderate: kernel security and bug fix update

2024-05-2907:38:48

access.redhat.com

linux kernel spectre-bhb mitigation ampereone

use after free fix

data races in br_handle_frame_finish

xfs thaw operation fix

rhel-34522 jira

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

Percentile

13.0%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

RHEL: Add Spectre-BHB mitigation for AmpereOne (CVE-2023-3006)
kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)
kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)

Bug Fix(es):

XFS: thaw operation hungs if caches are dropped while FS is frozen (JIRA:RHEL-34522)

OSVersionArchitecturePackageVersionFilename
RedHat8ppc64lekernel-debug-core< 4.18.0-372.105.1.el8_6kernel-debug-core-4.18.0-372.105.1.el8_6.ppc64le.rpm
RedHat8aarch64kernel-debug-debuginfo< 4.18.0-372.105.1.el8_6kernel-debug-debuginfo-4.18.0-372.105.1.el8_6.aarch64.rpm
RedHat8aarch64kernel-core< 4.18.0-372.105.1.el8_6kernel-core-4.18.0-372.105.1.el8_6.aarch64.rpm
RedHat8x86_64kernel-debuginfo-common-x86_64< 4.18.0-372.105.1.el8_6kernel-debuginfo-common-x86_64-4.18.0-372.105.1.el8_6.x86_64.rpm
RedHat8x86_64kernel-modules< 4.18.0-372.105.1.el8_6kernel-modules-4.18.0-372.105.1.el8_6.x86_64.rpm
RedHat8s390xbpftool< 4.18.0-372.105.1.el8_6bpftool-4.18.0-372.105.1.el8_6.s390x.rpm
RedHat8s390xkernel-zfcpdump-devel< 4.18.0-372.105.1.el8_6kernel-zfcpdump-devel-4.18.0-372.105.1.el8_6.s390x.rpm
RedHat8s390xperf-debuginfo< 4.18.0-372.105.1.el8_6perf-debuginfo-4.18.0-372.105.1.el8_6.s390x.rpm
RedHat8s390xkernel-tools< 4.18.0-372.105.1.el8_6kernel-tools-4.18.0-372.105.1.el8_6.s390x.rpm
RedHat8s390xkernel-debuginfo-common-s390x< 4.18.0-372.105.1.el8_6kernel-debuginfo-common-s390x-4.18.0-372.105.1.el8_6.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	ppc64le	kernel-debug-core	< 4.18.0-372.105.1.el8_6	kernel-debug-core-4.18.0-372.105.1.el8_6.ppc64le.rpm
RedHat	8	aarch64	kernel-debug-debuginfo	< 4.18.0-372.105.1.el8_6	kernel-debug-debuginfo-4.18.0-372.105.1.el8_6.aarch64.rpm
RedHat	8	aarch64	kernel-core	< 4.18.0-372.105.1.el8_6	kernel-core-4.18.0-372.105.1.el8_6.aarch64.rpm
RedHat	8	x86_64	kernel-debuginfo-common-x86_64	< 4.18.0-372.105.1.el8_6	kernel-debuginfo-common-x86_64-4.18.0-372.105.1.el8_6.x86_64.rpm
RedHat	8	x86_64	kernel-modules	< 4.18.0-372.105.1.el8_6	kernel-modules-4.18.0-372.105.1.el8_6.x86_64.rpm
RedHat	8	s390x	bpftool	< 4.18.0-372.105.1.el8_6	bpftool-4.18.0-372.105.1.el8_6.s390x.rpm
RedHat	8	s390x	kernel-zfcpdump-devel	< 4.18.0-372.105.1.el8_6	kernel-zfcpdump-devel-4.18.0-372.105.1.el8_6.s390x.rpm
RedHat	8	s390x	perf-debuginfo	< 4.18.0-372.105.1.el8_6	perf-debuginfo-4.18.0-372.105.1.el8_6.s390x.rpm
RedHat	8	s390x	kernel-tools	< 4.18.0-372.105.1.el8_6	kernel-tools-4.18.0-372.105.1.el8_6.s390x.rpm
RedHat	8	s390x	kernel-debuginfo-common-s390x	< 4.18.0-372.105.1.el8_6	kernel-debuginfo-common-s390x-4.18.0-372.105.1.el8_6.s390x.rpm