[RLSA-2024:4211] kernel security and bug fix update
An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)
kernel: ovl: fix leaked entry (CVE-2021-46972)
kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
kernel: gro: fix ownership transfer (CVE-2024-35890)
kernel: tls: (CVE-2024-26584, CVE-2024-26583, CVE-2024-26585)
kernel: wifi: (CVE-2024-35789, CVE-2024-27410, CVE-2024-35838, CVE-2024-35845)
kernel: mlxsw: (CVE-2024-35855, CVE-2024-35854, CVE-2024-35853, CVE-2024-35852, CVE-2024-36007)
kernel: PCI interrupt mapping cause oops rhel-8
kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)
kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng rhel-8
kernel: net/mlx5e: (CVE-2023-52626, CVE-2024-35835, CVE-2023-52667, CVE-2024-35959)
kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)
kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset rhel-8
kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
kernel: netfilter: nf_tables: use timestamp to check for set element timeout rhel-8.10
kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
kernel: x86/mm/swap: (CVE-2024-26759, CVE-2024-26906)
kernel: tipc: fix kernel warning when sending SYN message rhel-8
kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)
kernel: powerpc/imc-pmu/powernv: (CVE-2023-52675, CVE-2023-52686)
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
kernel: crypto: (CVE-2024-26974, CVE-2023-52669, CVE-2023-52813)
kernel: net/mlx5/bnx2x/usb: (CVE-2024-35960, CVE-2024-35958, CVE-2021-47310, CVE-2024-26804, CVE-2021-47311, CVE-2024-26859, CVE-2021-47236, CVE-2023-52703)
kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)
kernel: USB/usbnet: (CVE-2023-52781, CVE-2023-52877, CVE-2021-47495)
kernel: can: (CVE-2023-52878, CVE-2021-47456)
kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)
Bug Fix(es):
Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:Rocky Linux-29783)
Temporary values in FIPS integrity test should be zeroized rhel-8.10.z
Rocky Linux8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:Rocky Linux-36048)
[Rocky Linux8] blktests block/024 failed (JIRA:Rocky Linux-8130)
Rocky Linux8.9: EEH injections results Error: Power fault on Port 0 and other call traces(Everest/1050/Shiner) (JIRA:Rocky Linux-14195)
Latency spikes with Matrox G200 graphic cards (JIRA:Rocky Linux-36172)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- ID
- RLSA-2024:4211
- Severity
- important
- URL
- https://errata.rockylinux.org/RLSA-2024:4211
- Published
-
2024-07-15T12:17:38
(7 weeks ago) - Modified
-
2024-07-15T12:19:56
(7 weeks ago) - Rights
- Copyright 2024 Rocky Enterprise Software Foundation
- Other Advisories
-
-
ALAS-2024-1899
-
ALAS2-2021-1636
-
ALAS2-2024-2391
-
ALAS2-2024-2549
-
ALSA-2024:4211
-
ASB-A-174626251
-
DSA-5658-1
-
DSA-5681-1
-
DSA-5731-1
-
ELSA-2023-12874
-
ELSA-2023-12910
-
ELSA-2023-12911
-
ELSA-2023-13043
-
ELSA-2024-12110
-
ELSA-2024-12159
-
ELSA-2024-12570
-
ELSA-2024-12571
-
ELSA-2024-12606
-
ELSA-2024-2394
-
ELSA-2024-3306
-
ELSA-2024-3619
-
ELSA-2024-4211
-
ELSA-2024-4349
-
ELSA-2024-4583
-
ELSA-2024-4928
-
ELSA-2024-5363
-
FEDORA-2021-a35b44fd9f
-
FEDORA-2024-010fe8772a
-
FEDORA-2024-71f0f16533
-
FEDORA-2024-bc0db39a14
-
FEDORA-2024-d16d94b00d
-
FEDORA-2024-f35f9525d6
-
RHSA-2024:4211
-
RHSA-2024:4352
-
RLSA-2024:3619
-
RLSA-2024:4349
-
RLSA-2024:4583
-
RLSA-2024:4928
-
SSA:2024-157-01
-
SUSE-SU-2024:0110-1
-
SUSE-SU-2024:0112-1
-
SUSE-SU-2024:0113-1
-
SUSE-SU-2024:0115-1
-
SUSE-SU-2024:0117-1
-
SUSE-SU-2024:0118-1
-
SUSE-SU-2024:0120-1
-
SUSE-SU-2024:0129-1
-
SUSE-SU-2024:0141-1
-
SUSE-SU-2024:0153-1
-
SUSE-SU-2024:0154-1
-
SUSE-SU-2024:0156-1
-
SUSE-SU-2024:0160-1
-
SUSE-SU-2024:0855-1
-
SUSE-SU-2024:0856-1
-
SUSE-SU-2024:0857-1
-
SUSE-SU-2024:0858-1
-
SUSE-SU-2024:0900-1
-
SUSE-SU-2024:0900-2
-
SUSE-SU-2024:0910-1
-
SUSE-SU-2024:0925-1
-
SUSE-SU-2024:0926-1
-
SUSE-SU-2024:0975-1
-
SUSE-SU-2024:0976-1
-
SUSE-SU-2024:0977-1
-
SUSE-SU-2024:1322-1
-
SUSE-SU-2024:1454-1
-
SUSE-SU-2024:1465-1
-
SUSE-SU-2024:1466-1
-
SUSE-SU-2024:1480-1
-
SUSE-SU-2024:1489-1
-
SUSE-SU-2024:1490-1
-
SUSE-SU-2024:1642-1
-
SUSE-SU-2024:1643-1
-
SUSE-SU-2024:1644-1
-
SUSE-SU-2024:1645-1
-
SUSE-SU-2024:1646-1
-
SUSE-SU-2024:1648-1
-
SUSE-SU-2024:1650-1
-
SUSE-SU-2024:1659-1
-
SUSE-SU-2024:1663-1
-
SUSE-SU-2024:1677-1
-
SUSE-SU-2024:1679-1
-
SUSE-SU-2024:1680-1
-
SUSE-SU-2024:1682-1
-
SUSE-SU-2024:1685-1
-
SUSE-SU-2024:1686-1
-
SUSE-SU-2024:1692-1
-
SUSE-SU-2024:1695-1
-
SUSE-SU-2024:1696-1
-
SUSE-SU-2024:1705-1
-
SUSE-SU-2024:1706-1
-
SUSE-SU-2024:1707-1
-
SUSE-SU-2024:1709-1
-
SUSE-SU-2024:1711-1
-
SUSE-SU-2024:1712-1
-
SUSE-SU-2024:1713-1
-
SUSE-SU-2024:1720-1
-
SUSE-SU-2024:1726-1
-
SUSE-SU-2024:1729-1
-
SUSE-SU-2024:1732-1
-
SUSE-SU-2024:1735-1
-
SUSE-SU-2024:1736-1
-
SUSE-SU-2024:1739-1
-
SUSE-SU-2024:1740-1
-
SUSE-SU-2024:1742-1
-
SUSE-SU-2024:1746-1
-
SUSE-SU-2024:1748-1
-
SUSE-SU-2024:1749-1
-
SUSE-SU-2024:1751-1
-
SUSE-SU-2024:1757-1
-
SUSE-SU-2024:1759-1
-
SUSE-SU-2024:1870-1
-
SUSE-SU-2024:1979-1
-
SUSE-SU-2024:1983-1
-
SUSE-SU-2024:2008-1
-
SUSE-SU-2024:2010-1
-
SUSE-SU-2024:2011-1
-
SUSE-SU-2024:2019-1
-
SUSE-SU-2024:2092-1
-
SUSE-SU-2024:2135-1
-
SUSE-SU-2024:2162-1
-
SUSE-SU-2024:2183-1
-
SUSE-SU-2024:2184-1
-
SUSE-SU-2024:2185-1
-
SUSE-SU-2024:2189-1
-
SUSE-SU-2024:2190-1
-
SUSE-SU-2024:2203-1
-
SUSE-SU-2024:2207-1
-
SUSE-SU-2024:2337-1
-
SUSE-SU-2024:2360-1
-
SUSE-SU-2024:2362-1
-
SUSE-SU-2024:2365-1
-
SUSE-SU-2024:2372-1
-
SUSE-SU-2024:2381-1
-
SUSE-SU-2024:2384-1
-
SUSE-SU-2024:2385-1
-
SUSE-SU-2024:2394-1
-
SUSE-SU-2024:2446-1
-
SUSE-SU-2024:2495-1
-
SUSE-SU-2024:2561-1
-
SUSE-SU-2024:2571-1
-
SUSE-SU-2024:2722-1
-
SUSE-SU-2024:2802-1
-
SUSE-SU-2024:2824-1
-
SUSE-SU-2024:2850-1
-
SUSE-SU-2024:2892-1
-
SUSE-SU-2024:2893-1
-
SUSE-SU-2024:2894-1
-
SUSE-SU-2024:2895-1
-
SUSE-SU-2024:2896-1
-
SUSE-SU-2024:2901-1
-
SUSE-SU-2024:2902-1
-
SUSE-SU-2024:2923-1
-
SUSE-SU-2024:2929-1
-
SUSE-SU-2024:2939-1
-
SUSE-SU-2024:2940-1
-
SUSE-SU-2024:2947-1
-
SUSE-SU-2024:2948-1
-
SUSE-SU-2024:2973-1
-
USN-5343-1
-
USN-6497-1
-
USN-6502-1
-
USN-6502-2
-
USN-6502-3
-
USN-6502-4
-
USN-6503-1
-
USN-6520-1
-
USN-6537-1
-
USN-6572-1
-
USN-6688-1
-
USN-6725-1
-
USN-6725-2
-
USN-6726-1
-
USN-6726-2
-
USN-6726-3
-
USN-6740-1
-
USN-6765-1
-
USN-6766-1
-
USN-6766-2
-
USN-6766-3
-
USN-6767-1
-
USN-6767-2
-
USN-6774-1
-
USN-6777-1
-
USN-6777-2
-
USN-6777-3
-
USN-6777-4
-
USN-6778-1
-
USN-6795-1
-
USN-6816-1
-
USN-6817-1
-
USN-6817-2
-
USN-6817-3
-
USN-6818-1
-
USN-6818-2
-
USN-6818-3
-
USN-6818-4
-
USN-6819-1
-
USN-6819-2
-
USN-6819-3
-
USN-6819-4
-
USN-6820-1
-
USN-6820-2
-
USN-6821-1
-
USN-6821-2
-
USN-6821-3
-
USN-6821-4
-
USN-6828-1
-
USN-6831-1
-
USN-6865-1
-
USN-6866-1
-
USN-6866-2
-
USN-6866-3
-
USN-6867-1
-
USN-6871-1
-
USN-6878-1
-
USN-6892-1
-
USN-6893-1
-
USN-6893-2
-
USN-6893-3
-
USN-6895-1
-
USN-6895-2
-
USN-6895-3
-
USN-6895-4
-
USN-6896-1
-
USN-6896-2
-
USN-6896-3
-
USN-6896-4
-
USN-6896-5
-
USN-6898-1
-
USN-6898-2
-
USN-6898-3
-
USN-6898-4
-
USN-6900-1
-
USN-6917-1
-
USN-6918-1
-
USN-6919-1
-
USN-6924-1
-
USN-6924-2
-
USN-6927-1
-
USN-6949-1
-
USN-6949-2
-
USN-6952-1
-
USN-6952-2
-
USN-6953-1
-
USN-6955-1
-
USN-6972-1
-
USN-6972-2
-
USN-6972-3
-
USN-6972-4
-
USN-6979-1
-
VU:799380
-
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:rpm/rockylinux/python3-perf?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/python3-perf?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/perf?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/perf?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-tools?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-tools?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-tools-libs?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-tools-libs?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-tools-libs-devel?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-tools-libs-devel?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-modules?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-modules?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-modules-extra?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-modules-extra?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-headers?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-headers?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-doc?arch=noarch&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | noarch | |
Affected | pkg:rpm/rockylinux/kernel-devel?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-devel?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-debuginfo-common-x86_64?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-debuginfo-common-aarch64?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-debug?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-debug?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-debug-modules?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-debug-modules?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-debug-modules-extra?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-debug-modules-extra?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-debug-devel?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-debug-devel?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-debug-core?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-debug-core?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-cross-headers?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-cross-headers?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-core?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/kernel-core?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 | |
Affected | pkg:rpm/rockylinux/kernel-abi-stablelists?arch=noarch&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | noarch | |
Affected | pkg:rpm/rockylinux/bpftool?arch=x86_64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | x86_64 | |
Affected | pkg:rpm/rockylinux/bpftool?arch=aarch64&distro=rockylinux-8.10 | rockylinux |
![]() |
< 4.18.0-553.8.1.el8_10 | rockylinux-8.10 | aarch64 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |