RHSA-2024:1607: Important: kernel security, bug fix, and enhancement update
Important: kernel security, bug fix, and enhancement update
Other sources
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: vmwgfx: NULL pointer dereference in vmwcmddxdefinequery (CVE-2022-38096) kernel: Out of boundary write in perfreadgroup() as result of overflow a perfevent's readsize (CVE-2023-6931) kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546,ZDI-CAN-20527) kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receiveencryptedstandard of client (CVE-2024-0565) kernel: use-after-free in amdgpucswaitallfences in drivers/gpu/drm/amd/amdgpu/amdgpucs.c (CVE-2023-51042) kernel: ext4: kernel bug in ext4writeinlinedataend() (CVE-2021-33631) kernel: nftables: use-after-free vulnerability in the nftverdictinit() function (CVE-2024-1086) Bug Fix(es): OCP 4.12 crashed due to use-after-free in libceph in rhel8 (JIRA:RHEL-21394) kernel: nftables: use-after-free vulnerability in the nftverdictinit() function (JIRA:RHEL-24010) Screen floods with random colour suggesting something not initialised (JIRA:RHEL-21055) kernel: vmxgfx: NULL pointer dereference in vmwcmddxdefinequery (JIRA:RHEL-22766) tx-checksumming required for accessing port in OpenShift for RHEL 8.6 (JIRA:RHEL-20822) kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receiveencryptedstandard of client (JIRA:RHEL-22077) kernel: Out of boundary write in perfreadgroup() as result of overflow a perfevent's readsize (JIRA:RHEL-22930) rbd: don't move requests to the running list on errors [8.x] (JIRA:RHEL-24204) kernel: use-after-free in amdgpucswaitallfences in drivers/gpu/drm/amd/amdgpu/amdgpucs.c (JIRA:RHEL-24479) ceph: several cap and snap fixes (JIRA:RHEL-20909) [RHVH] Migration hangs between RHVH release bellow 4.5.1 and RHVH over or equal 4.5.2 release (JIRA:RHEL-23063) unable to access smsc95xx based interface unless you start outgoing traffic. (JIRA:RHEL-25719) [RHEL8] ] BUG bio-696 (Not tainted): Poison overwritten (JIRA:RHEL-26101) kernel: GSM multiplexing race condition leads to privilege escalation (JIRA:RHEL-19954) backport smartpqi: fix disablemanagedinterrupts (JIRA:RHEL-26139) kernel: ext4: kernel bug in ext4writeinlinedataend() (JIRA:RHEL-26331) ceph: always check dir caps asynchronously (JIRA:RHEL-27496) Enhancement(s): [IBM 8.10 FEAT] Upgrade the qeth driver to latest from upstream, e.g. kernel 6.4 (JIRA:RHEL-25811)
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/bpftoolto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/bpftool-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-abi-stableliststo a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-coreto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-cross-headersto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-debugto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-debug-develto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-develto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-docto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-headersto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-toolsto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/perfto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/perf-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/python3-perfto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-debuginfo-common-s390xto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-zfcpdumpto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-zfcpdump-coreto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-zfcpdump-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-zfcpdump-develto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-debuginfo-common-ppc64leto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/bpftoolto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/bpftool-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-coreto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-cross-headersto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-debugto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-debug-develto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-debuginfo-common-aarch64to a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-develto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-headersto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-toolsto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/perfto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/perf-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/python3-perfto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa - Upgrade
Upgrade
redhat/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9 - Upgrade
Upgrade
redhat/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 4.18.0-513.24.1.el8_9.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1607?
The severity of RHSA-2024:1607 is categorized as Important due to the kernel security vulnerabilities addressed.
How do I fix RHSA-2024:1607?
To fix RHSA-2024:1607, update your kernel packages to version 4.18.0-513.24.1.el8_9 or later.
Which versions are affected by RHSA-2024:1607?
RHSA-2024:1607 affects several versions of Red Hat Enterprise Linux and CodeReady Linux Builder for multiple architectures.
What vulnerabilities are addressed in RHSA-2024:1607?
RHSA-2024:1607 addresses multiple vulnerabilities including a NULL pointer dereference in vmw_cmd_dx_define_query (CVE-2022-38096).
Is a reboot required after applying the fixes for RHSA-2024:1607?
Yes, a reboot is generally required to ensure that changes take effect after applying the updates for RHSA-2024:1607.