Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:5282
HistoryAug 13, 2024 - 2:21 p.m.

(RHSA-2024:5282) Important: kernel-rt security update

2024-08-1314:21:27
access.redhat.com
11
kernel-rt
real time linux kernel
netfilter
network route management
use after netif_napi_del()
nfsd
rhel-8.4.z batch 27

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

JSON

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)

  • kernel: net: CVE-2024-36971 kernel: UAF in network route management (CVE-2024-36971)

  • kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502)

  • kernel: NFSD: Fix the behavior of READ near OFFSET_MAX (CVE-2022-48827)

  • kernel: NFSD: Fix ia_size underflow (CVE-2022-48828)

  • kernel: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes (CVE-2022-48829)

Bug Fix(es):

  • kernel-rt: update RT source tree to the latest RHEL-8.4.z Batch 27 (JIRA:RHEL-50526)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64kernel-rt-core< 4.18.0-305.138.1.rt7.214.el8_4kernel-rt-core-4.18.0-305.138.1.rt7.214.el8_4.x86_64.rpm
RedHat8x86_64kernel-rt-debuginfo-common-x86_64< 4.18.0-305.138.1.rt7.214.el8_4kernel-rt-debuginfo-common-x86_64-4.18.0-305.138.1.rt7.214.el8_4.x86_64.rpm
RedHat8x86_64kernel-rt-debug-kvm< 4.18.0-305.138.1.rt7.214.el8_4kernel-rt-debug-kvm-4.18.0-305.138.1.rt7.214.el8_4.x86_64.rpm
RedHat8x86_64kernel-rt< 4.18.0-305.138.1.rt7.214.el8_4kernel-rt-4.18.0-305.138.1.rt7.214.el8_4.x86_64.rpm
RedHat8x86_64kernel-rt-debuginfo< 4.18.0-305.138.1.rt7.214.el8_4kernel-rt-debuginfo-4.18.0-305.138.1.rt7.214.el8_4.x86_64.rpm
RedHat8x86_64kernel-rt-debug< 4.18.0-305.138.1.rt7.214.el8_4kernel-rt-debug-4.18.0-305.138.1.rt7.214.el8_4.x86_64.rpm
RedHat8x86_64kernel-rt-debug-modules-extra< 4.18.0-305.138.1.rt7.214.el8_4kernel-rt-debug-modules-extra-4.18.0-305.138.1.rt7.214.el8_4.x86_64.rpm
RedHat8x86_64kernel-rt-debug-debuginfo< 4.18.0-305.138.1.rt7.214.el8_4kernel-rt-debug-debuginfo-4.18.0-305.138.1.rt7.214.el8_4.x86_64.rpm
RedHat8x86_64kernel-rt-debug-core< 4.18.0-305.138.1.rt7.214.el8_4kernel-rt-debug-core-4.18.0-305.138.1.rt7.214.el8_4.x86_64.rpm
RedHat8x86_64kernel-rt-modules-extra< 4.18.0-305.138.1.rt7.214.el8_4kernel-rt-modules-extra-4.18.0-305.138.1.rt7.214.el8_4.x86_64.rpm
Rows per page:
1-10 of 151

Related

nessus 67
redhat 36
ubuntucve 6
redhatcve 6
cvelist 6
nvd 6
cve 6
vulnrichment 6
debiancve 6
osv 19
cbl_mariner 2
attackerkb 1
virtuozzo 1
cisa_kev 1
malwarebytes 1
f5 1
oraclelinux 6
photon 3
amazon 1
thn 1
redos 1
rocky 4
openvas 9
almalinux 1
ubuntu 2
nessus
nessus
RHEL 8 : kernel (RHSA-2024:5266)
2024-08-13 00:00:00
RHEL 8 : kernel-rt (RHSA-2024:5282)
2024-08-13 00:00:00
RHEL 8 : kernel (RHSA-2024:5281)
2024-08-13 00:00:00
redhat
redhat
(RHSA-2024:5266) Important: kernel security update
2024-08-13 07:17:14
(RHSA-2024:5281) Important: kernel security update
2024-08-13 14:20:59
(RHSA-2024:5519) Important: kpatch-patch-4_18_0-305_120_1 security update
2024-08-19 00:59:28
ubuntucve
ubuntucve
CVE-2022-48828
2024-07-16 00:00:00
CVE-2022-48829
2024-07-16 00:00:00
CVE-2022-48827
2024-07-16 00:00:00
redhatcve
redhatcve
CVE-2022-48829
2024-07-16 21:25:41
CVE-2022-48827
2024-07-16 21:25:21
CVE-2022-48828
2024-07-16 21:25:31
cvelist
cvelist
CVE-2022-48829 NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
2024-07-16 11:44:13
CVE-2022-48827 NFSD: Fix the behavior of READ near OFFSET_MAX
2024-07-16 11:44:12
CVE-2022-48828 NFSD: Fix ia_size underflow
2024-07-16 11:44:12
nvd
nvd
CVE-2022-48829
2024-07-16 12:15:06
CVE-2022-48828
2024-07-16 12:15:06
CVE-2022-48827
2024-07-16 12:15:06
cve
cve
CVE-2022-48827
2024-07-16 12:15:06
CVE-2022-48829
2024-07-16 12:15:06
CVE-2022-48828
2024-07-16 12:15:06
vulnrichment
vulnrichment
CVE-2022-48827 NFSD: Fix the behavior of READ near OFFSET_MAX
2024-07-16 11:44:12
CVE-2022-48829 NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
2024-07-16 11:44:13
CVE-2022-48828 NFSD: Fix ia_size underflow
2024-07-16 11:44:12
debiancve
debiancve
CVE-2022-48829
2024-07-16 12:15:06
CVE-2022-48828
2024-07-16 12:15:06
CVE-2022-48827
2024-07-16 12:15:06
osv
osv
CVE-2022-48829
2024-07-16 12:15:06
CVE-2022-48828
2024-07-16 12:15:06
CVE-2022-48827
2024-07-16 12:15:06
cbl_mariner
cbl_mariner
CVE-2024-36971 affecting package kernel for versions less than 5.15.158.2-1
2024-06-12 22:23:00
CVE-2024-36971 affecting package kernel for versions less than 6.6.35.1-4
2024-08-14 20:43:58
attackerkb
attackerkb
CVE-2024-36971
2024-06-10 00:00:00
virtuozzo
virtuozzo
[Important] [Security] Virtuozzo ReadyKernel Patch 169.0 for Virtuozzo Hybrid Server 7.5
2024-08-19 00:00:00
cisa_kev
cisa_kev
Android Kernel Remote Code Execution Vulnerability
2024-08-07 00:00:00
malwarebytes
malwarebytes
Android vulnerability used in targeted attacks patched by Google
2024-08-06 13:47:58
f5
f5
K000140987: Linux kernel vulnerability CVE-2024-36971
2024-09-06 00:00:00
oraclelinux
oraclelinux
kernel security update
2024-09-18 00:00:00
kernel security update
2024-08-14 00:00:00
Unbreakable Enterprise kernel-container security update
2024-08-12 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0769
2024-06-28 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0640
2024-06-26 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0305
2024-06-27 00:00:00
amazon
amazon
Medium: kernel
2024-08-14 19:05:00
thn
thn
Google Patches New Android Kernel Vulnerability Exploited in the Wild
2024-08-06 06:12:00
redos
redos
ROS-20240819-01
2024-08-19 00:00:00
rocky
rocky
kernel security update
2024-08-21 14:53:21
kernel-rt security update
2024-08-21 14:52:36
kernel security update
2024-08-21 14:52:19
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2901-1)
2024-08-15 00:00:00
Debian: Security Advisory (DSA-5730-1)
2024-07-16 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:2947-1)
2024-08-20 00:00:00
almalinux
almalinux
Important: kernel-rt security update
2024-08-08 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2024-08-08 00:00:00
Linux kernel (Azure) vulnerabilities
2024-08-14 00:00:00

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

JSON
Related for RHSA-2024:5282
nessus67redhat36ubuntucve6redhatcve6cvelist6nvd6cve6vulnrichment6debiancve6osv19cbl_mariner2attackerkb1virtuozzo1cisa_kev1malwarebytes1f51oraclelinux6photon3amazon1thn1redos1rocky4openvas9almalinux1ubuntu2