Lucene search

K
redhatRedHatRHSA-2024:3530
HistoryMay 31, 2024 - 3:40 p.m.

(RHSA-2024:3530) Important: kernel-rt security and bug fix update

2024-05-3115:40:17
access.redhat.com
8
kernel-rt packages
real time linux kernel
fine-tuning systems
use-after-free vulnerability
data races
rt source tree
rhel-8.4
debugging issue

6.8 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.4%

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function (CVE-2024-1086)

  • kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)

Bug Fix(es):

  • kernel-rt: update RT source tree to the latest RHEL-8.4.z Batch 25 (JIRA:RHEL-36724)

  • [RHEL-8.4] kernel-rt-debug: BUG: sleeping function called from invalid context at kernel/locking/rtmutex.c:968 (JIRA:RHEL-8758)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.