Threats Tagged 'cve-2024-36899'

This Red Hat security advisory addresses multiple vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9.2 Extended Update Support. The issues include a use-after-free vulnerability in the gpiolib cdev component (CVE-2024-36899), an out-of-bounds array indexing flaw in the mac80211 Wi-Fi subsystem (CVE-2024-41071), and improper handling in the ice driver (CVE-2024-42139). These vulnerabilities have been rated with an important security impact by Red Hat. A kernel update is available that fixes these issues, and a system reboot is required to apply the update. The advisory covers various architectures including x86_64, s390x, ppc64le, and aarch64 for Red Hat Enterprise Linux 9.2 variants.

This security advisory from Red Hat addresses multiple vulnerabilities in the kernel-rt packages, which provide the Real Time Linux Kernel for systems requiring high determinism. The update fixes a use-after-free vulnerability in the GPIO library (CVE-2024-36899), an out-of-bounds array indexing issue in the mac80211 WiFi component (CVE-2024-41071), and improper handling in the ice network driver (CVE-2024-42139). These vulnerabilities are rated as important by Red Hat and affect Red Hat Enterprise Linux 9.2 Extended Update Support. A reboot is required after applying the update for the fixes to take effect.