security update for kernel

This security advisory from Red Hat addresses multiple vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9. The issues fixed include illegal access to memory descriptors in the net/smc subsystem (CVE-2024-26615), uninitialized integrity buffers in the block subsystem (CVE-2024-43854), a missing return statement in iommu_report_device_fault() (CVE-2024-44994), uninitialized extack in netfilter flowtable (CVE-2024-45018), permission bypass in selinux and smack inode_setsecctx hook (CVE-2024-46695), potential underflow in qdisc_pkt_len_init() with UFO in the net subsystem (CVE-2024-49949), and improper sanitization of offset and length in netfilter nft_payload before checksum calculation (CVE-2024-50251). The advisory requires updating the kernel packages and rebooting the system to apply the fixes.

The vulnerabilities could lead to illegal memory access, permission bypass, and potential kernel subsystem malfunctions, which may affect system stability and security. The issues span multiple kernel components, potentially allowing attackers to bypass security checks or cause memory corruption. However, the overall severity is rated as moderate by Red Hat, and no known exploits in the wild have been reported.

A security update is available and should be applied promptly. Systems must be rebooted after applying the update to ensure the fixes take effect. Refer to the Red Hat advisory RHSA-2024:10939 for detailed update instructions.