Threats Tagged 'cve-2024-41090'

This advisory addresses security vulnerabilities in the Red Hat Enterprise Linux 8.6 kernel live patch modules kpatch-patch-4_18_0-372_87_1 and kpatch-patch-4_18_0-372_91_1. The vulnerabilities include a use-after-free (UAF) in network route management (CVE-2024-36971) and denial of service issues related to short frames in virtio-net tap and tun interfaces (CVE-2024-41090 and CVE-2024-41091). These patches modify the running kernel to fix these issues without requiring a reboot. The update is rated as important by Red Hat Product Security. No CVSS scores are provided in the advisory. The vulnerabilities affect Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions and Extended Update Support Extension versions. A security update is available to address these issues.

A security update for the kpatch live kernel patch module targeting Red Hat Enterprise Linux 9.0 addresses multiple vulnerabilities including use-after-free issues and denial of service flaws in kernel components such as TIPC message reassembly, network route management, and virtio-net drivers. The update fixes CVE-2024-36886, CVE-2024-36971, CVE-2024-41090, and CVE-2024-41091. Systems must be rebooted after applying the update for the fixes to take effect.

Red Hat has released a security advisory for a kernel live patch module targeting kernel-5.14.0-427.13.1.el9_4. The update addresses two denial of service vulnerabilities (CVE-2024-41090 and CVE-2024-41091) related to the virtio-net tap and tun drivers interacting with mlx5_core. These vulnerabilities could allow denial of service via short frame handling. The advisory rates the impact as Important and requires a system reboot after applying the update. The update is available for various Red Hat Enterprise Linux 9 variants on x86_64 and ppc64le architectures.

Red Hat has released a security update for the kpatch live kernel patch module targeting kernel version 5.14.0-284.52.1.el9_2. The update addresses two denial of service vulnerabilities (CVE-2024-41090 and CVE-2024-41091) related to the virtio-net tap and tun drivers interacting with mlx5_core. These vulnerabilities could allow an attacker to cause a denial of service via short frame handling. The update requires a system reboot to take effect and is rated with an Important security impact by Red Hat.

This advisory addresses two denial of service vulnerabilities (CVE-2024-41090 and CVE-2024-41091) in the Red Hat Enterprise Linux kernel live patch modules for kernel version 4.18.0-477.43.1.el8_8. The vulnerabilities involve the virtio-net tap and tun interfaces related to mlx5_core short frame handling. The update requires a system reboot to take effect and is rated with an Important security impact by Red Hat.

This advisory addresses two denial of service vulnerabilities (CVE-2024-41090 and CVE-2024-41091) in the Red Hat Enterprise Linux kernel live patch modules for kernel version 4.18.0-305.120.1.el8_4. The vulnerabilities involve the virtio-net tap and tun drivers interacting with mlx5_core, which can cause short frame denial of service conditions. Red Hat has released updated kpatch modules to fix these issues. Systems must be rebooted after applying the update for the patch to take effect.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.