Threats Tagged 'cve-2024-26993'

This Red Hat security advisory addresses multiple vulnerabilities in the kernel-rt packages, which provide the Real Time Linux Kernel for systems requiring high determinism. The update fixes seven security issues including flaws in netfilter nf_tables, IPv6 segment routing, IP tunneling, CIFS parsing, and sysfs reference handling. The advisory rates the overall security impact as Moderate. The update is available for Red Hat Enterprise Linux 9.2 Extended Update Support and requires a system reboot to take effect.

A Red Hat security advisory addresses multiple vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9.2 Extended Update Support. The issues include flaws in netfilter nf_tables, IPv6 segment routing, IP tunnels, CIFS parsing, and sysfs reference handling. These vulnerabilities range in impact but are collectively rated as moderate severity by Red Hat. The advisory provides updated kernel packages to fix these security issues and related bugs. Systems must be rebooted after applying the updates to ensure the fixes take effect.

This advisory addresses two vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9. The first is a use-after-free and null pointer dereference issue in the IPv6 Segment Routing (sr) component (CVE-2024-26735). The second is a reference leak in the sysfs subsystem (CVE-2024-26993). Both issues have been fixed in updated kernel packages. The update requires a system reboot to take effect and is rated as having a moderate security impact by Red Hat.

This advisory addresses multiple security vulnerabilities in the Red Hat kernel-rt packages, which provide the Real Time Linux Kernel for systems requiring high determinism. The fixed issues include a use-after-free vulnerability in TIPC message reassembly (CVE-2024-36886), a reference leak in sysfs_break_active_protection() (CVE-2024-26993), and an out-of-bounds array indexing issue in the mac80211 WiFi subsystem (CVE-2024-41071). These vulnerabilities could lead to remote code execution, resource leaks, or memory corruption. Red Hat has released updated kernel-rt packages for Red Hat Enterprise Linux 8.4 variants to address these issues. A system reboot is required after applying the update for the fixes to take effect.