Threat Intelligence Database

Two security vulnerabilities were identified in the tuned packages for Red Hat Enterprise Linux Fast Datapath 8. The first involves improper sanitization of the instance_name parameter in the instance_create() method (CVE-2024-52337). The second allows arbitrary scripts to be executed as root via the script_pre and script_post options (CVE-2024-52336). These issues have been addressed in updated tuned packages provided by Red Hat. The update is rated as Important by Red Hat Product Security. Users should apply the available update to mitigate these vulnerabilities.

Two security vulnerabilities were identified in the tuned packages used by Red Hat Enterprise Linux Fast Datapath 9. The first (CVE-2024-52337) involves improper sanitization of the instance_name parameter in the instance_create() method. The second (CVE-2024-52336) allows arbitrary scripts to be executed as root via the script_pre and script_post options. These issues could lead to privilege escalation or unauthorized code execution. Red Hat has issued an important security advisory with updated packages to address these vulnerabilities. Users should apply the update after ensuring all prior relevant errata are installed.

A security vulnerability (CVE-2024-52337) exists in the tuned packages used by Red Hat Enterprise Linux. The issue involves improper sanitization of the 'instance_name' parameter in the instance_create() method. This flaw could potentially allow unintended behavior due to insufficient input validation. Red Hat has released security updates addressing this vulnerability for multiple versions of Red Hat Enterprise Linux, including Fast Datapath 7 and Extended Update Support 9.2. The severity is rated as medium. A patch is available and should be applied to affected systems.

Two security vulnerabilities were identified in the tuned packages of Red Hat Enterprise Linux 9. The first (CVE-2024-52336) allows arbitrary scripts to be executed as root via the 'script_pre' and 'script_post' options. The second (CVE-2024-52337) involves improper sanitization of the 'instance_name' parameter in the instance_create() method. Red Hat has released an important security update addressing these issues for multiple variants of Red Hat Enterprise Linux 9.