RHSA-2024:0724: Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.<br>Security Fix(es):<br><li> kernel: use-after-free in schqfq network scheduler (CVE-2023-4921)</li> <li> kernel: inactive elements in nftpipapowalk (CVE-2023-6817)</li> <li> kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination (CVE-2024-0646)</li> <li> kernel: use-after-free vulnerability in function scosocksendmsg() (CVE-2021-3640)</li> <li> kernel: improper input validation may lead to privilege escalation (CVE-2021-4204)</li> <li> kernel: memory leak for large arguments in videousercopy function in drivers/media/v4l2-core/v4l2-ioctl.c (CVE-2021-30002)</li> <li> kernel: eBPF verification flaw (CVE-2021-34866)</li> <li> kernel: smb2ioctlqueryinfo NULL pointer dereference (CVE-2022-0168)</li> <li> kernel: Linux ebpf logic vulnerability leads to critical memory read and write gaining root privileges (CVE-2022-0500)</li> <li> kernel: NULL pointer dereference in udfexpandfileadinicbdue() during writeback (CVE-2022-0617)</li> <li> kernel: possible race condition in drivers/tty/ttybuffers.c (CVE-2022-1462)</li> <li> kernel: buffer overflow in nftsetdescconcatparse() (CVE-2022-2078)</li> <li> kernel: nftables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586)</li> <li> kernel: netfilter: nfconntrackirc message handling issue (CVE-2022-2663)</li> <li> kernel: memory leak in ipv6renewoptions() (CVE-2022-3524)</li> <li> kernel: nfp: use-after-free in areacacheget() (CVE-2022-3545)</li> <li> kernel: data races around icsk-&gt;icskafops in doipv6setsockopt (CVE-2022-3566)</li> <li> kernel: Rate limit overflow messages in r8152 in intrcallback (CVE-2022-3594)</li> <li> kernel: memory leak in l2caprecvacldata of the file net/bluetooth/l2capcore.c (CVE-2022-3619)</li> <li> kernel: denial of service in followpagepte in mm/gup.c due to poisoned pte entry (CVE-2022-3623)</li> <li> kernel: Double-free in split2MBgttentry when function intelgvtdmamapguestpage failed (CVE-2022-3707)</li> <li> kernel: possible to use the debugger to write zero into a location of choice (CVE-2022-21499)</li> <li> kernel: local privileges escalation in kernel/bpf/verifier.c (CVE-2022-23222)</li> <li> kernel: Executable Space Protection Bypass (CVE-2022-25265)</li> <li> kernel: double free in usb8devstartxmit in drivers/net/can/usb/usb8dev.c (CVE-2022-28388)</li> <li> kernel: double free in emsusbstartxmit in drivers/net/can/usb/emsusb.c (CVE-2022-28390)</li>

— Red Hat