Threats Tagged 'cve-2024-50275'

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935) * kernel: arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat has issued a security advisory for kernel-rt packages, which provide the Real Time Linux Kernel for systems requiring high determinism. The update addresses two vulnerabilities: CVE-2024-26935, a regression involving an unremoved procfs host directory in the SCSI core, and CVE-2024-50275, which discards stale CPU state when handling SVE traps on arm64 architectures. The advisory rates the security impact as moderate. Systems must be rebooted after applying the update for it to take effect.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (CVE-2024-50154) * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.