Red Hat Security Advisory: kernel security update

This Red Hat security advisory covers multiple kernel vulnerabilities affecting Red Hat Enterprise Linux 9 and related distributions. The fixes address: illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615), uninitialized integrity buffer in block subsystem (CVE-2024-43854), missing return in iommu_report_device_fault() (CVE-2024-44994), uninitialized extack in netfilter flowtable (CVE-2024-45018), permission bypass in inode_setsecctx hook affecting selinux and smack (CVE-2024-46695), potential underflow in qdisc_pkt_len_init() with UFO (CVE-2024-49949), and improper sanitization of offset and length in nft_payload (CVE-2024-50251). These vulnerabilities could lead to kernel crashes, permission bypass, or memory corruption. Red Hat has released patches for these issues and recommends updating and rebooting affected systems.

The vulnerabilities impact the Linux kernel core in Red Hat Enterprise Linux 9 and related products, potentially allowing illegal memory access, permission bypass, and kernel crashes. The advisory rates the overall impact as moderate. There are no known exploits in the wild at this time. The issues affect kernel subsystems related to networking, block device integrity, IOMMU fault reporting, and security module permission checks.

Red Hat has released official patches addressing these vulnerabilities. Users should apply the kernel update provided in Red Hat Enterprise Linux 9 and reboot the system to ensure the fixes take effect. Refer to Red Hat advisory RHSA-2024:10939 and the article https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigation steps are required beyond applying the official update and rebooting.