Red Hat Security Advisory: kernel security update

This Red Hat security advisory addresses multiple vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 8. The fixes include: preventing permission bypass in the inode_setsecctx hook (CVE-2024-46695), avoiding potential underflow in qdisc_pkt_len_init() with UFO (CVE-2024-49949), fixing a crash due to race conditions in blk-rq-qos (CVE-2024-50082), removing broken LDR uprobe support on ARM64 (CVE-2024-50099), fixing kernel information leak in xfrm algo dumping (CVE-2024-50110), validating new SA prefix length in xfrm (CVE-2024-50142), preventing VMOVP on dying VPE in irqchip/gic-v4 (CVE-2024-50192), fixing potential crash in nf_reject_ipv6 (CVE-2024-50256), and initializing dangling pointer in vsock/virtio (CVE-2024-50264). These fixes collectively address moderate security issues in the kernel.

The vulnerabilities fixed in this advisory could allow unauthorized permission bypass, kernel crashes, information leaks, and other stability or security issues within the Linux kernel. The impact is rated as moderate by Red Hat Product Security. No known exploits in the wild have been reported. The issues affect core kernel functionality, which could potentially impact system security and stability if left unpatched.

A security update is available from Red Hat for Red Hat Enterprise Linux 8 that addresses these vulnerabilities. Users should apply the kernel update as provided by Red Hat and reboot the system to ensure the fixes take effect. Refer to the official Red Hat advisory (RHSA-2024:10943) and article https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigation steps are required beyond applying the official patch and rebooting.