Threats Tagged 'cve-2024-41090'

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This advisory addresses two denial of service vulnerabilities (CVE-2024-41090 and CVE-2024-41091) in the Red Hat Enterprise Linux kernel live patch modules for kernel version 4.18.0-305.120.1.el8_4. The vulnerabilities involve the virtio-net tap and tun drivers interacting with mlx5_core, which can cause short frame denial of service conditions. Red Hat has released updated kpatch modules to fix these issues. Systems must be rebooted after applying the update for the patch to take effect.

This advisory addresses two denial of service vulnerabilities (CVE-2024-41090 and CVE-2024-41091) in the Red Hat Enterprise Linux kernel live patch modules for kernel version 4.18.0-477.43.1.el8_8. The vulnerabilities involve the virtio-net tap and tun interfaces related to mlx5_core short frame handling. The update requires a system reboot to take effect and is rated with an Important security impact by Red Hat.

Red Hat has released a security update for the kpatch live kernel patch module targeting kernel version 5.14.0-284.52.1.el9_2. The update addresses two denial of service vulnerabilities (CVE-2024-41090 and CVE-2024-41091) related to the virtio-net tap and tun drivers interacting with mlx5_core. These vulnerabilities could allow an attacker to cause a denial of service via short frame handling. The update requires a system reboot to take effect and is rated with an Important security impact by Red Hat.

Red Hat has released a security advisory for a kernel live patch module targeting kernel-5.14.0-427.13.1.el9_4. The update addresses two denial of service vulnerabilities (CVE-2024-41090 and CVE-2024-41091) related to the virtio-net tap and tun drivers interacting with mlx5_core. These vulnerabilities could allow denial of service via short frame handling. The advisory rates the impact as Important and requires a system reboot after applying the update. The update is available for various Red Hat Enterprise Linux 9 variants on x86_64 and ppc64le architectures.

This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-70.85.1.el9_0. Security Fix(es): * kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886) * kernel: net: CVE-2024-36971 kernel: UAF in network route management (CVE-2024-36971) * kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090) * kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-4.18.0-372.87.1.el8_6. Security Fix(es): * kernel: net: CVE-2024-36971 kernel: UAF in network route management (CVE-2024-36971) * kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090) * kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.