RHSA-2024:1249: Important: kernel security and bug fix update
Important: kernel security and bug fix update
Other sources
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): (CVE-2024-26602, ?) kernel: use-after-free in l2capconnect and l2capleconnectreq in net/bluetooth/l2capcore.c (CVE-2022-42896) kernel: use-after-free in schqfq network scheduler (CVE-2023-4921) kernel: IGB driver inadequate buffer size for frames larger than MTU (CVE-2023-45871) kernel: fbcon: out-of-sync arrays in fbconmodedeleted due to wrong con2fbmap assignment (CVE-2023-38409) kernel: nftables: use-after-free vulnerability in the nftverdictinit() function (CVE-2024-1086) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): [rhel-7] INFO: possible circular locking dependency detected: store+0x70/0xe0 kernfsfopwrite+0xe3/0x190 (BZ#2161654) qedf: Reading /sys/kernel/debug/qedf/hostX/stopioonerror can cause panic (BZ#2224973)
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1249?
The severity of RHSA-2024:1249 is categorized as 'Important'.
How do I fix RHSA-2024:1249?
To address RHSA-2024:1249, update the kernel and related packages to version 3.10.0-1160.114.2.el7 or later.
Which systems are affected by RHSA-2024:1249?
RHSA-2024:1249 affects multiple versions of Red Hat Enterprise Linux, including server, desktop, and workstation editions.
What vulnerabilities does RHSA-2024:1249 address?
RHSA-2024:1249 addresses a use-after-free vulnerability in Bluetooth handling in the Linux kernel.
Is RHSA-2024:1249 relevant for all Red Hat subscriptions?
Yes, RHSA-2024:1249 is relevant for all Red Hat subscriptions that utilize the affected kernel versions.