Red Hat Security Advisory: kernel-rt security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201) * kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
This advisory covers security fixes in the Linux kernel packages for Red Hat Enterprise Linux 7 Extended Life Cycle Support. The first vulnerability, CVE-2024-2201, concerns Intel CPU Native Branch History Injection (BHI), categorized under CWE-1423. The second, CVE-2024-41071, addresses an out-of-bounds array indexing issue in the mac80211 WiFi kernel component, categorized under CWE-787. The update mitigates these issues by patching the kernel packages. The advisory references Red Hat Bugzilla entries 2268118 and 2300448 for the respective CVEs. The update requires a system reboot to take effect.
Potential Impact
The vulnerabilities impact the core Linux kernel on affected Red Hat Enterprise Linux 7 Extended Life Cycle Support systems. CVE-2024-2201 involves a CPU-level branch history injection issue that could potentially affect CPU behavior. CVE-2024-41071 involves out-of-bounds memory access in the WiFi subsystem, which could lead to memory corruption or crashes. The advisory classifies the security impact as Important (high severity). No known exploits in the wild have been reported at the time of the advisory.
Mitigation Recommendations
Red Hat has released updated kernel packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 7 Extended Life Cycle Support should apply the provided kernel update as described in the Red Hat article https://access.redhat.com/articles/11258. A system reboot is required for the update to take effect. There is no indication that additional mitigations are necessary beyond applying the official update.
Red Hat Security Advisory: kernel-rt security update
Description
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201) * kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers security fixes in the Linux kernel packages for Red Hat Enterprise Linux 7 Extended Life Cycle Support. The first vulnerability, CVE-2024-2201, concerns Intel CPU Native Branch History Injection (BHI), categorized under CWE-1423. The second, CVE-2024-41071, addresses an out-of-bounds array indexing issue in the mac80211 WiFi kernel component, categorized under CWE-787. The update mitigates these issues by patching the kernel packages. The advisory references Red Hat Bugzilla entries 2268118 and 2300448 for the respective CVEs. The update requires a system reboot to take effect.
Potential Impact
The vulnerabilities impact the core Linux kernel on affected Red Hat Enterprise Linux 7 Extended Life Cycle Support systems. CVE-2024-2201 involves a CPU-level branch history injection issue that could potentially affect CPU behavior. CVE-2024-41071 involves out-of-bounds memory access in the WiFi subsystem, which could lead to memory corruption or crashes. The advisory classifies the security impact as Important (high severity). No known exploits in the wild have been reported at the time of the advisory.
Mitigation Recommendations
Red Hat has released updated kernel packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 7 Extended Life Cycle Support should apply the provided kernel update as described in the Red Hat article https://access.redhat.com/articles/11258. A system reboot is required for the update to take effect. There is no indication that additional mitigations are necessary beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:6994
- Cve Count
- 2
- Additional Cves
- ["CVE-2024-41071"]
Threat ID: 6a3da1ef4853345fc1831ba1
Added to database: 06/25/2026, 21:47:27 UTC
Last enriched: 06/25/2026, 22:43:11 UTC
Last updated: 09/10/2026, 19:24:54 UTC
Views: 50
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.