Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:5259
HistoryAug 13, 2024 - 12:08 a.m.

(RHSA-2024:5259) Important: kernel security update

2024-08-1300:08:25
access.redhat.com
57
kernel packages
linux operating system
security update
uaf reads
/etc/shadow hashes
netfix
initramfs
tcp_cwnd_reduction
eventpoll_release_file
netfilter
ipset
gfs2
quota_change%u corruption

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

Low

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating
system.

Security Fix(es):

  • kernel: FUSE allows UAF reads of write() buffers, allowing theft of (partial) /etc/shadow hashes (CVE-2022-1011)

  • net: fix __dst_negative_advice() race (CVE-2024-36971)

Bug Fix(es):

  • kernel.spec: run initramfs generation in %post (not only in %posttrans)
    (RHEL-3292)

  • tcp: fix zero cwnd in tcp_cwnd_reduction (RHEL-43212)

  • epoll: fix use-after-free in eventpoll_release_file (RHEL-39665)

  • RHEL 7.9: include [net] netfilter: ipset: fix ip_set_list allocation failure (RHEL-6204)

  • gfs2: The gfs2_logd process to hang or stall which causes a performance degradation on the gfs2 filesystem (RHEL-8427)

  • [rhel7] gfs2: quota_change%u corruption (RHEL-37473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7s390xkernel-debug< 3.10.0-1160.123.1.el7kernel-debug-3.10.0-1160.123.1.el7.s390x.rpm
RedHat7s390xperf< 3.10.0-1160.123.1.el7perf-3.10.0-1160.123.1.el7.s390x.rpm
RedHat7ppc64lepython-perf< 3.10.0-1160.123.1.el7python-perf-3.10.0-1160.123.1.el7.ppc64le.rpm
RedHat7ppc64lekernel-headers< 3.10.0-1160.123.1.el7kernel-headers-3.10.0-1160.123.1.el7.ppc64le.rpm
RedHat7ppc64bpftool-debuginfo< 3.10.0-1160.123.1.el7bpftool-debuginfo-3.10.0-1160.123.1.el7.ppc64.rpm
RedHat7s390xkernel-debuginfo-common-s390x< 3.10.0-1160.123.1.el7kernel-debuginfo-common-s390x-3.10.0-1160.123.1.el7.s390x.rpm
RedHat7ppc64kernel-bootwrapper< 3.10.0-1160.123.1.el7kernel-bootwrapper-3.10.0-1160.123.1.el7.ppc64.rpm
RedHat7ppc64kernel< 3.10.0-1160.123.1.el7kernel-3.10.0-1160.123.1.el7.ppc64.rpm
RedHat7s390xkernel-debug-devel< 3.10.0-1160.123.1.el7kernel-debug-devel-3.10.0-1160.123.1.el7.s390x.rpm
RedHat7noarchkernel-abi-whitelists< 3.10.0-1160.123.1.el7kernel-abi-whitelists-3.10.0-1160.123.1.el7.noarch.rpm
Rows per page:
1-10 of 751

Related

oraclelinux 2
nessus 82
cbl_mariner 4
attackerkb 1
redhat 19
virtuozzo 1
ubuntucve 2
redhatcve 2
osv 10
vulnrichment 1
nvd 2
cisa_kev 1
cve 2
cvelist 2
f5 1
malwarebytes 1
debiancve 2
veracode 1
cnvd 1
prion 1
githubexploit 1
photon 8
openvas 33
amazon 5
fedora 2
thn 1
mageia 2
ubuntu 4
redos 1
suse 3
ibm 1
oraclelinux
oraclelinux
kernel security update
2024-09-18 00:00:00
Unbreakable Enterprise kernel security update
2022-09-06 00:00:00
nessus
nessus
RHEL 7 : kernel (RHSA-2024:5259)
2024-08-13 00:00:00
Oracle Linux 7 : kernel (ELSA-2024-5259)
2024-09-18 00:00:00
RHEL 9 : kpatch-patch-5_14_0-427_13_1 (RHSA-2024:5523)
2024-08-19 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-36971 affecting package kernel for versions less than 5.15.158.2-1
2024-06-12 22:23:00
CVE-2024-36971 affecting package kernel for versions less than 6.6.35.1-4
2024-08-14 20:43:58
CVE-2022-1011 affecting package kernel 5.10.117.1-2
2022-07-14 21:00:16
attackerkb
attackerkb
CVE-2024-36971
2024-06-10 00:00:00
redhat
redhat
(RHSA-2024:5519) Important: kpatch-patch-4_18_0-305_120_1 security update
2024-08-19 00:59:28
(RHSA-2024:5388) Important: kernel security update
2024-08-14 11:16:35
(RHSA-2024:5521) Important: kpatch-patch-5_14_0-284_48_1 and kpatch-patch-5_14_0-284_52_1 security update
2024-08-19 00:59:31
virtuozzo
virtuozzo
[Important] [Security] Virtuozzo ReadyKernel Patch 169.0 for Virtuozzo Hybrid Server 7.5
2024-08-19 00:00:00
ubuntucve
ubuntucve
CVE-2024-36971
2024-06-10 00:00:00
CVE-2022-1011
2022-03-18 00:00:00
redhatcve
redhatcve
CVE-2024-36971
2024-06-14 04:12:59
CVE-2022-1011
2022-03-17 17:51:06
osv
osv
SO_CNX_ADVICE Linux kernel LPE 0-day vulnerability
2024-08-01 00:00:00
CVE-2024-36971
2024-06-10 09:15:00
CVE-2022-1011
2022-03-18 18:15:12
vulnrichment
vulnrichment
CVE-2024-36971 net: fix __dst_negative_advice() race
2024-06-10 09:03:23
nvd
nvd
CVE-2024-36971
2024-06-10 09:15:09
CVE-2022-1011
2022-03-18 18:15:12
cisa_kev
cisa_kev
Android Kernel Remote Code Execution Vulnerability
2024-08-07 00:00:00
cve
cve
CVE-2024-36971
2024-06-10 09:15:09
CVE-2022-1011
2022-03-18 18:15:12
cvelist
cvelist
CVE-2024-36971 net: fix __dst_negative_advice() race
2024-06-10 09:03:23
CVE-2022-1011
2022-03-18 00:00:00
f5
f5
K000140987: Linux kernel vulnerability CVE-2024-36971
2024-09-06 00:00:00
malwarebytes
malwarebytes
Android vulnerability used in targeted attacks patched by Google
2024-08-06 13:47:58
debiancve
debiancve
CVE-2024-36971
2024-06-10 09:15:09
CVE-2022-1011
2022-03-18 18:15:12
veracode
veracode
Use-After-Free
2022-06-16 17:20:41
cnvd
cnvd
Linux Kernel FUSE filesystem elevation of privilege vulnerability
2022-03-22 00:00:00
prion
prion
Privilege escalation
2022-03-18 18:15:00
githubexploit
githubexploit
Exploit for Use After Free in Linux Linux Kernel
2023-06-16 03:02:38
photon
photon
Important Photon OS Security Update - PHSA-2022-0495
2022-07-17 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0769
2024-06-28 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0640
2024-06-26 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:1440-1)
2022-04-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1641-1)
2022-05-12 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2022-9342e59a98)
2022-03-23 00:00:00
amazon
amazon
Medium: kernel
2024-08-14 19:05:00
Important: kernel
2024-06-06 20:17:00
Medium: kernel
2022-05-04 01:01:00
fedora
fedora
[SECURITY] Fedora 34 Update: kernel-5.16.15-101.fc34
2022-03-18 19:15:59
[SECURITY] Fedora 35 Update: kernel-5.16.15-201.fc35
2022-03-18 20:08:47
thn
thn
Google Patches New Android Kernel Vulnerability Exploited in the Wild
2024-08-06 06:12:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-03-29 17:25:34
Updated kernel-linus packages fix security vulnerabilities
2022-03-29 17:25:34
ubuntu
ubuntu
Linux kernel vulnerabilities
2022-07-13 00:00:00
Linux kernel (Azure) vulnerabilities
2022-07-28 00:00:00
Linux kernel (OEM) vulnerabilities
2022-04-20 00:00:00
redos
redos
ROS-20240819-01
2024-08-19 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2022-04-13 00:00:00
Security update for the Linux Kernel (important)
2022-04-12 00:00:00
Security update for the Linux Kernel (important)
2022-06-17 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in the Linux Kernel affect IBM Spectrum Copy Data Management
2022-06-09 17:51:49

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

Low

JSON
Related for RHSA-2024:5259
oraclelinux2nessus82cbl_mariner4attackerkb1redhat19virtuozzo1ubuntucve2redhatcve2osv10vulnrichment1nvd2cisa_kev1cve2cvelist2f51malwarebytes1debiancve2veracode1cnvd1prion1githubexploit1photon8openvas33amazon5fedora2thn1mageia2ubuntu4redos1suse3ibm1