Red Hat Security Advisory: kernel security and bug fix update
This advisory addresses multiple moderate-severity vulnerabilities in the Linux kernel packages used by Red Hat Enterprise Linux 9. The issues involve netfilter nf_tables handling of anonymous sets with timeout flags, sanitization of protocol numbers in custom expectations, and prevention of perpetual headroom growth in IP tunnels. These vulnerabilities could affect kernel stability and security. Red Hat has released an update that fixes these issues, and a system reboot is required to apply the update.
AI Analysis
Technical Summary
Red Hat Product Security issued an advisory (RHSA-2024:3306) for a kernel security and bug fix update addressing five CVEs including CVE-2024-26642, CVE-2024-26643, CVE-2024-26673, CVE-2024-26804, and CVE-2024-35890. The vulnerabilities relate to netfilter nf_tables anonymous set handling with timeout flags, sanitization of layer 3 and 4 protocol numbers in nft_ct custom expectations, and prevention of perpetual headroom growth in the IP tunnel subsystem. The update is for Red Hat Enterprise Linux 9 across multiple architectures and variants. The advisory rates the impact as moderate and recommends applying the update and rebooting the system.
Potential Impact
The vulnerabilities could lead to improper handling of netfilter nf_tables sets and protocol numbers, potentially causing kernel instability or unexpected behavior in network packet filtering. The IP tunnel issue could cause resource exhaustion due to perpetual headroom growth. No known exploits in the wild have been reported. The overall security impact is rated moderate by Red Hat.
Mitigation Recommendations
Red Hat has released an official kernel update that addresses these vulnerabilities. Users should apply the update as described in the advisory (https://access.redhat.com/articles/11258) and reboot their systems to ensure the fixes take effect. No additional mitigation steps are indicated beyond applying the official patch.
Red Hat Security Advisory: kernel security and bug fix update
Description
This advisory addresses multiple moderate-severity vulnerabilities in the Linux kernel packages used by Red Hat Enterprise Linux 9. The issues involve netfilter nf_tables handling of anonymous sets with timeout flags, sanitization of protocol numbers in custom expectations, and prevention of perpetual headroom growth in IP tunnels. These vulnerabilities could affect kernel stability and security. Red Hat has released an update that fixes these issues, and a system reboot is required to apply the update.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat Product Security issued an advisory (RHSA-2024:3306) for a kernel security and bug fix update addressing five CVEs including CVE-2024-26642, CVE-2024-26643, CVE-2024-26673, CVE-2024-26804, and CVE-2024-35890. The vulnerabilities relate to netfilter nf_tables anonymous set handling with timeout flags, sanitization of layer 3 and 4 protocol numbers in nft_ct custom expectations, and prevention of perpetual headroom growth in the IP tunnel subsystem. The update is for Red Hat Enterprise Linux 9 across multiple architectures and variants. The advisory rates the impact as moderate and recommends applying the update and rebooting the system.
Potential Impact
The vulnerabilities could lead to improper handling of netfilter nf_tables sets and protocol numbers, potentially causing kernel instability or unexpected behavior in network packet filtering. The IP tunnel issue could cause resource exhaustion due to perpetual headroom growth. No known exploits in the wild have been reported. The overall security impact is rated moderate by Red Hat.
Mitigation Recommendations
Red Hat has released an official kernel update that addresses these vulnerabilities. Users should apply the update as described in the advisory (https://access.redhat.com/articles/11258) and reboot their systems to ensure the fixes take effect. No additional mitigation steps are indicated beyond applying the official patch.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:3306
- Cve Count
- 5
- Additional Cves
- ["CVE-2024-26643","CVE-2024-26673","CVE-2024-26804","CVE-2024-35890"]
Threat ID: 6a3da1f64853345fc183452d
Added to database: 06/25/2026, 21:47:34 UTC
Last enriched: 06/25/2026, 22:49:48 UTC
Last updated: 09/10/2026, 19:36:47 UTC
Views: 96
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.