(RHSA-2024:4412) Important: kernel-rt security and bug fix update

2024-07-0908:53:06

access.redhat.com

real time linux kernel

privilege escalation

smb client

netfilter

cve

kernel-rt

rhel-9.0.z batch 18

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

JSON

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation (CVE-2024-0193)
kernel: smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434)
kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673)

Bug Fix(es):

kernel-rt: update RT source tree to the latest RHEL-9.0.z Batch 18 (JIRA:RHEL-36756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9x86_64kernel-rt-core< 5.14.0-70.105.1.rt21.177.el9_0kernel-rt-core-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat9x86_64kernel-rt-debug-core< 5.14.0-70.105.1.rt21.177.el9_0kernel-rt-debug-core-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat9x86_64kernel-rt-debug-devel< 5.14.0-70.105.1.rt21.177.el9_0kernel-rt-debug-devel-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat9x86_64kernel-rt-debug-debuginfo< 5.14.0-70.105.1.rt21.177.el9_0kernel-rt-debug-debuginfo-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat9x86_64kernel-rt-modules-extra< 5.14.0-70.105.1.rt21.177.el9_0kernel-rt-modules-extra-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat9x86_64kernel-rt< 5.14.0-70.105.1.rt21.177.el9_0kernel-rt-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat9x86_64kernel-rt-debug-modules-extra< 5.14.0-70.105.1.rt21.177.el9_0kernel-rt-debug-modules-extra-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat9x86_64kernel-rt-debug-kvm< 5.14.0-70.105.1.rt21.177.el9_0kernel-rt-debug-kvm-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat9x86_64kernel-rt-debug< 5.14.0-70.105.1.rt21.177.el9_0kernel-rt-debug-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat9x86_64kernel-rt-kvm< 5.14.0-70.105.1.rt21.177.el9_0kernel-rt-kvm-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	x86_64	kernel-rt-core	< 5.14.0-70.105.1.rt21.177.el9_0	kernel-rt-core-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat	9	x86_64	kernel-rt-debug-core	< 5.14.0-70.105.1.rt21.177.el9_0	kernel-rt-debug-core-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat	9	x86_64	kernel-rt-debug-devel	< 5.14.0-70.105.1.rt21.177.el9_0	kernel-rt-debug-devel-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat	9	x86_64	kernel-rt-debug-debuginfo	< 5.14.0-70.105.1.rt21.177.el9_0	kernel-rt-debug-debuginfo-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat	9	x86_64	kernel-rt-modules-extra	< 5.14.0-70.105.1.rt21.177.el9_0	kernel-rt-modules-extra-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat	9	x86_64	kernel-rt	< 5.14.0-70.105.1.rt21.177.el9_0	kernel-rt-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat	9	x86_64	kernel-rt-debug-modules-extra	< 5.14.0-70.105.1.rt21.177.el9_0	kernel-rt-debug-modules-extra-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat	9	x86_64	kernel-rt-debug-kvm	< 5.14.0-70.105.1.rt21.177.el9_0	kernel-rt-debug-kvm-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat	9	x86_64	kernel-rt-debug	< 5.14.0-70.105.1.rt21.177.el9_0	kernel-rt-debug-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm
RedHat	9	x86_64	kernel-rt-kvm	< 5.14.0-70.105.1.rt21.177.el9_0	kernel-rt-kvm-5.14.0-70.105.1.rt21.177.el9_0.x86_64.rpm