Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:4106
HistoryJun 26, 2024 - 12:04 a.m.

(RHSA-2024:4106) Important: kernel-rt security update

2024-06-2600:04:06
access.redhat.com
10
kernel-rt packages
real time linux kernel
high determinism
security update
netfilter
nf_tables
xen-netfront
cve-2024-27397
cve-2024-27393
cve-2024-27403
cve-2024-35870
cve-2024-35960
cve-2024-35958
cve-2021-47400
octeontx2-af
cve-2024-36957
cvss score

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

16.4%

JSON

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)

  • kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393)

  • kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403)

  • kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870)

  • kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960)

  • kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958)

  • kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400)

  • kernel: octeontx2-af: avoid off-by-one read from userspace (CVE-2024-36957)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9x86_64kernel-rt-debug-modules-extra< 5.14.0-284.71.1.rt14.356.el9_2kernel-rt-debug-modules-extra-5.14.0-284.71.1.rt14.356.el9_2.x86_64.rpm
RedHat9x86_64kernel-rt-debug-kvm< 5.14.0-284.71.1.rt14.356.el9_2kernel-rt-debug-kvm-5.14.0-284.71.1.rt14.356.el9_2.x86_64.rpm
RedHat9x86_64kernel-rt-devel< 5.14.0-284.71.1.rt14.356.el9_2kernel-rt-devel-5.14.0-284.71.1.rt14.356.el9_2.x86_64.rpm
RedHat9x86_64kernel-rt-debug-modules-core< 5.14.0-284.71.1.rt14.356.el9_2kernel-rt-debug-modules-core-5.14.0-284.71.1.rt14.356.el9_2.x86_64.rpm
RedHat9x86_64kernel-rt-modules-core< 5.14.0-284.71.1.rt14.356.el9_2kernel-rt-modules-core-5.14.0-284.71.1.rt14.356.el9_2.x86_64.rpm
RedHat9x86_64kernel-rt-debug< 5.14.0-284.71.1.rt14.356.el9_2kernel-rt-debug-5.14.0-284.71.1.rt14.356.el9_2.x86_64.rpm
RedHat9x86_64kernel-rt-debuginfo< 5.14.0-284.71.1.rt14.356.el9_2kernel-rt-debuginfo-5.14.0-284.71.1.rt14.356.el9_2.x86_64.rpm
RedHat9x86_64kernel-rt-modules< 5.14.0-284.71.1.rt14.356.el9_2kernel-rt-modules-5.14.0-284.71.1.rt14.356.el9_2.x86_64.rpm
RedHat9x86_64kernel-rt-debug-devel< 5.14.0-284.71.1.rt14.356.el9_2kernel-rt-debug-devel-5.14.0-284.71.1.rt14.356.el9_2.x86_64.rpm
RedHat9x86_64kernel-rt-debug-debuginfo< 5.14.0-284.71.1.rt14.356.el9_2kernel-rt-debug-debuginfo-5.14.0-284.71.1.rt14.356.el9_2.x86_64.rpm
Rows per page:
1-10 of 171

Related

nessus 46
redhat 21
osv 27
rocky 6
oraclelinux 3
ubuntucve 8
redhatcve 8
cvelist 8
cve 8
nvd 8
vulnrichment 8
debiancve 8
cbl_mariner 2
xen 1
photon 4
ibm 6
almalinux 2
redos 1
openvas 15
debian 1
ubuntu 8
nessus
nessus
RHEL 9 : kernel (RHSA-2024:4108)
2024-06-26 00:00:00
RHEL 9 : kernel-rt (RHSA-2024:4106)
2024-06-26 00:00:00
Rocky Linux 9 : kernel (RLSA-2024:4349)
2024-07-15 00:00:00
redhat
redhat
(RHSA-2024:4108) Important: kernel security and bug fix update
2024-06-26 00:05:24
(RHSA-2024:4010) Important: OpenShift Container Platform 4.14.31 security update
2024-06-26 02:01:58
(RHSA-2024:4349) Moderate: kernel security and bug fix update
2024-07-08 01:54:18
osv
osv
Moderate: kernel security and bug fix update
2024-07-15 12:18:37
Moderate: kernel security and bug fix update
2024-07-15 12:20:29
CVE-2021-47400
2024-05-21 15:15:00
rocky
rocky
kernel security and bug fix update
2024-07-15 12:18:37
kernel security and bug fix update
2024-07-15 12:20:29
kernel security update
2024-07-26 12:33:50
oraclelinux
oraclelinux
kernel security and bug fix update
2024-07-08 00:00:00
kernel security update
2024-07-18 00:00:00
kernel security and bug fix update
2024-07-02 00:00:00
ubuntucve
ubuntucve
CVE-2021-47400
2024-05-21 00:00:00
CVE-2024-27393
2024-05-14 00:00:00
CVE-2024-35870
2024-05-19 00:00:00
redhatcve
redhatcve
CVE-2021-47400
2024-05-22 08:57:12
CVE-2024-27403
2024-05-17 22:37:42
CVE-2024-27393
2024-05-16 05:24:37
cvelist
cvelist
CVE-2021-47400 net: hns3: do not allow call hns3_nic_net_open repeatedly
2024-05-21 15:03:55
CVE-2024-36957 octeontx2-af: avoid off-by-one read from userspace
2024-05-30 15:35:50
CVE-2024-27393 xen-netfront: Add missing skb_mark_for_recycle
2024-05-09 16:37:07
cve
cve
CVE-2021-47400
2024-05-21 15:15:25
CVE-2024-35870
2024-05-19 09:15:08
CVE-2024-27393
2024-05-14 15:12:26
nvd
nvd
CVE-2021-47400
2024-05-21 15:15:25
CVE-2024-27393
2024-05-14 15:12:26
CVE-2024-27397
2024-05-14 15:12:28
vulnrichment
vulnrichment
CVE-2021-47400 net: hns3: do not allow call hns3_nic_net_open repeatedly
2024-05-21 15:03:55
CVE-2024-27393 xen-netfront: Add missing skb_mark_for_recycle
2024-05-09 16:37:07
CVE-2024-27397 netfilter: nf_tables: use timestamp to check for set element timeout
2024-05-09 16:37:22
debiancve
debiancve
CVE-2021-47400
2024-05-21 15:15:25
CVE-2024-27403
2024-05-17 12:15:10
CVE-2024-27397
2024-05-14 15:12:28
cbl_mariner
cbl_mariner
CVE-2024-27393 affecting package hyperv-daemons for versions less than 6.6.35.1-1
2024-07-23 02:21:02
CVE-2024-27397 affecting package hyperv-daemons for versions less than 5.15.167.1-1
2024-06-12 22:23:00
xen
xen
Linux/xen-netfront: Memory leak due to missing cleanup function
2024-05-07 17:11:00
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0662
2024-08-02 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0319
2024-07-17 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0788
2024-08-28 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management
2024-09-27 18:20:53
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-08-22 09:25:46
Security Bulletin: Multiple vulnerabilities in IBM Business Automation Workflow Machine Learning Server are addressed with 24.0.0-IF002
2024-09-05 20:05:41
almalinux
almalinux
Important: kernel security and bug fix update
2024-07-02 00:00:00
Important: kernel-rt security and bug fix update
2024-07-08 00:00:00
redos
redos
ROS-20240927-07
2024-09-27 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5703-1)
2024-07-01 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2024-2206)
2024-08-21 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2024-2207)
2024-08-21 00:00:00
debian
debian
[SECURITY] [DSA 5703-1] linux security update
2024-06-02 17:04:56
ubuntu
ubuntu
Linux kernel vulnerabilities
2024-08-13 00:00:00
Linux kernel kernel vulnerabilities
2024-07-19 00:00:00
Linux kernel vulnerabilities
2024-07-26 00:00:00

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

16.4%

JSON
Related for RHSA-2024:4106
nessus46redhat21osv27rocky6oraclelinux3ubuntucve8redhatcve8cvelist8cve8nvd8vulnrichment8debiancve8cbl_mariner2xen1photon4ibm6almalinux2redos1openvas15debian1ubuntu8