(RHSA-2024:6753) Moderate: kernel security update

2024-09-1811:08:17

access.redhat.com

kernel packages

linux kernel

ext4

netfilter

nf_tables

ipv6

virtio-net

thp

bpf

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ext4: fix double-free of blocks due to wrong extents moved_len (CVE-2024-26704)
kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (CVE-2024-26773)
kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (CVE-2024-26772)
kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020)
kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019)
kernel: ipv6: sr: fix out-of-bounds read when setting HMAC data. (CVE-2022-48687)
kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898)
kernel: virtio-net: Add validation for used length (CVE-2021-47352)
kernel: mm, thp: bail out early in collapse_file for writeback page (CVE-2021-47492)
kernel: bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8ppc64lekernel-modules< 4.18.0-372.123.1.el8_6kernel-modules-4.18.0-372.123.1.el8_6.ppc64le.rpm
RedHat8s390xkernel-debug-modules-extra< 4.18.0-372.123.1.el8_6kernel-debug-modules-extra-4.18.0-372.123.1.el8_6.s390x.rpm
RedHat8s390xkernel-debug< 4.18.0-372.123.1.el8_6kernel-debug-4.18.0-372.123.1.el8_6.s390x.rpm
RedHat8s390xkernel-debug-debuginfo< 4.18.0-372.123.1.el8_6kernel-debug-debuginfo-4.18.0-372.123.1.el8_6.s390x.rpm
RedHat8x86_64kernel-modules< 4.18.0-372.123.1.el8_6kernel-modules-4.18.0-372.123.1.el8_6.x86_64.rpm
RedHat8s390xkernel-devel< 4.18.0-372.123.1.el8_6kernel-devel-4.18.0-372.123.1.el8_6.s390x.rpm
RedHat8ppc64lekernel< 4.18.0-372.123.1.el8_6kernel-4.18.0-372.123.1.el8_6.ppc64le.rpm
RedHat8ppc64lekernel-modules-extra< 4.18.0-372.123.1.el8_6kernel-modules-extra-4.18.0-372.123.1.el8_6.ppc64le.rpm
RedHat8ppc64lekernel-debug-devel< 4.18.0-372.123.1.el8_6kernel-debug-devel-4.18.0-372.123.1.el8_6.ppc64le.rpm
RedHat8x86_64kernel-core< 4.18.0-372.123.1.el8_6kernel-core-4.18.0-372.123.1.el8_6.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	ppc64le	kernel-modules	< 4.18.0-372.123.1.el8_6	kernel-modules-4.18.0-372.123.1.el8_6.ppc64le.rpm
RedHat	8	s390x	kernel-debug-modules-extra	< 4.18.0-372.123.1.el8_6	kernel-debug-modules-extra-4.18.0-372.123.1.el8_6.s390x.rpm
RedHat	8	s390x	kernel-debug	< 4.18.0-372.123.1.el8_6	kernel-debug-4.18.0-372.123.1.el8_6.s390x.rpm
RedHat	8	s390x	kernel-debug-debuginfo	< 4.18.0-372.123.1.el8_6	kernel-debug-debuginfo-4.18.0-372.123.1.el8_6.s390x.rpm
RedHat	8	x86_64	kernel-modules	< 4.18.0-372.123.1.el8_6	kernel-modules-4.18.0-372.123.1.el8_6.x86_64.rpm
RedHat	8	s390x	kernel-devel	< 4.18.0-372.123.1.el8_6	kernel-devel-4.18.0-372.123.1.el8_6.s390x.rpm
RedHat	8	ppc64le	kernel	< 4.18.0-372.123.1.el8_6	kernel-4.18.0-372.123.1.el8_6.ppc64le.rpm
RedHat	8	ppc64le	kernel-modules-extra	< 4.18.0-372.123.1.el8_6	kernel-modules-extra-4.18.0-372.123.1.el8_6.ppc64le.rpm
RedHat	8	ppc64le	kernel-debug-devel	< 4.18.0-372.123.1.el8_6	kernel-debug-devel-4.18.0-372.123.1.el8_6.ppc64le.rpm
RedHat	8	x86_64	kernel-core	< 4.18.0-372.123.1.el8_6	kernel-core-4.18.0-372.123.1.el8_6.x86_64.rpm