Red Hat has released a moderate severity security update for multiple vulnerabilities in the Linux kernel packages included in Red Hat Enterprise Linux 9. The update addresses issues such as illegal memory access, uninitialized buffers, permission bypasses, and potential underflows in various kernel subsystems including net/smc, block, iommu, netfilter, selinux, and net. Applying the update and rebooting the system is required to mitigate these vulnerabilities.
Red Hat has released a security update for the Linux kernel packages in Red Hat Enterprise Linux 9 addressing multiple moderate severity vulnerabilities. The update fixes a buffer overrun in BPF ring buffer reservations (CVE-2024-41009), a crash on USB serial device resume (CVE-2024-42244), and a use-after-free in the CXL port driver (CVE-2024-50226). The update requires a system reboot to take effect.
Multiple moderate-severity vulnerabilities have been identified in the Linux kernel packages used by Red Hat Enterprise Linux 9. These include improper initialization of nexthop fields (CVE-2024-42283), a requirement for drivers to supply cache_invalidate_user operations (CVE-2024-46824), and a use-after-free vulnerability in the multipath TCP timer deletion function (CVE-2024-46858). Red Hat has released updated kernel packages to address these issues. A system reboot is required to apply the updates effectively.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: netfilter: bridge: confirm multicast packets before passing them up the stack (CVE-2024-27415)
* kernel: net: bridge: mst: fix vlan use-after-free (CVE-2024-36979)
* kernel: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (CVE-2024-38558)
* kernel: netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat has issued a moderate severity security advisory addressing two vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 8.6. The first vulnerability (CVE-2024-26923) involves a race condition in the af_unix garbage collector during connect() operations. The second (CVE-2024-36270) concerns the netfilter tproxy component improperly handling cases where IP has been disabled on a device. These issues affect the core Linux kernel and require a system reboot after applying the update.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)
* kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071)
* kernel: ice: Fix improper extts handling (CVE-2024-42139)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A security update for the Linux kernel addresses two vulnerabilities: a possible use-after-free and null pointer dereference in the IPv6 Segment Routing (SR) implementation (CVE-2024-26735), and a reference leak in the sysfs subsystem (CVE-2024-26993). These issues affect Red Hat Enterprise Linux 9 and related distributions. The update is rated as moderate severity and requires a system reboot to apply. No known exploits are reported in the wild at this time.
The kernel packages contain the Linux kernel, the core of any Linux operating
system.
Security Fix(es):
* kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function (CVE-2024-1086)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Multiple moderate-severity vulnerabilities have been identified in the Linux kernel packages used by Red Hat Enterprise Linux 9. These issues involve netfilter nf_tables handling of anonymous sets with timeout flags, sanitization of protocol numbers in custom expectations, and prevention of perpetual headroom growth in IP tunnels. Red Hat has released a security update that addresses these vulnerabilities. Applying the update requires a system reboot to take effect.
A moderate severity security update for the Linux kernel in Red Hat Enterprise Linux 9.2 addresses vulnerabilities identified as CVE-2024-25742 and CVE-2024-25743. These issues involve AMD hardware instructions raising #VC exceptions at exit. The update also includes several bug fixes related to kernel latency, NFS file corruption, and cgroup task pinning. The kernel is a core component of the operating system, and this update requires a system reboot to take effect.
In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out too soon after its root item is inserted upon subvolume creation.
copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing param_kernel->data_size check. This is related to ctl_ioctl.
In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access.
A denial of service vulnerability due to a deadlock was identified in the sctp_auto_asconf_init function within the Linux kernel's SCTP subsystem. This flaw allows local users with limited privileges to trigger a deadlock, potentially causing the system to crash. The vulnerability has been assigned CVE-2024-0639 and is rated as medium severity. Red Hat has released kernel updates addressing this issue in Red Hat Enterprise Linux 9 and its variants. Applying the update and rebooting the system mitigates the vulnerability.
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.
CVE-2023-6270 is a high-severity use-after-free vulnerability in the ATA over Ethernet (AoE) driver of the Linux kernel used by Red Hat Enterprise Linux 6. The flaw arises from improper reference count handling in the aoecmd_cfg_pkts() function, allowing a race condition between freeing a network device structure and accessing it via a global queue. Exploitation can lead to denial of service or potentially remote code execution. The vulnerability requires local access with low privileges and high attack complexity, with no user interaction needed. Although no known exploits are currently in the wild, affected systems remain at risk until patched. European organizations running RHEL 6, especially in critical infrastructure sectors, should prioritize mitigation. Countries with significant RHEL 6 usage and strategic infrastructure are most at risk. Immediate patching and kernel updates, along with network segmentation and monitoring, are recommended to mitigate impact.
CVE-2023-7042 is a medium severity vulnerability in Red Hat Enterprise Linux 6 involving a null pointer dereference in the ath10k wireless driver. The flaw exists in the function ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() within the Linux kernel's ath10k driver, potentially causing a denial of service (DoS) by crashing the system. Exploitation requires local access with high privileges and does not impact confidentiality or integrity. No user interaction is needed, and no known exploits are currently in the wild. The vulnerability affects systems using the ath10k wireless driver on RHEL 6, which is an older distribution still in use in some environments. European organizations relying on legacy RHEL 6 deployments with affected wireless hardware could experience service disruptions. Mitigation involves applying kernel patches from Red Hat or disabling the affected wireless driver if patching is not feasible. Countries with significant industrial and governmental use of legacy Red Hat Enterprise Linux 6 systems, such as Germany, France, and the UK, are more likely to be impacted.
