RHSA-2024:1881: Moderate: kernel security and bug fix update
Moderate: kernel security and bug fix update
Other sources
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240) kernel: tls: use-after-free with partial reads and async decrypt (CVE-2024-26582) kernel: tls: handle backlogging of crypto requests (CVE-2024-26584) kernel: mlxsw: spectrumacltcam: Fix stack corruption (CVE-2024-26586) Bug Fix(es): [Lenovo RHEL9] Realtek patch for P1 G6 Audio (BZ#2208068) Please integrate commit b949ee6801f4 ("powerpc/fadump: invoke ibm,os-term with rtascallunlocked()") (JIRA:RHEL-17106) PVT:1050:XM:Nimitz Linux EEH Nimitz - After FATAL Injection BIT 13 on D10 Register, unable to see the htx traffic status after long time (JIRA:RHEL-22413) RHEL9.2 - Performance Degradation in the Case of Asymmetric Scheduler Domains in Linux (JIRA:RHEL-24862) kernel: mlxsw: spectrumacltcam: Fix stack corruption (JIRA:RHEL-29186) kernel NULL pointer dereference from nvmefciogetuuid+0xc/0x30 [nvmefc] (JIRA:RHEL-29221) schedsetaffinity(2) returns undocumented error ENODEV (JIRA:RHEL-21140) kernel: tls: use-after-free with partial reads and async decrypt (JIRA:RHEL-26396) kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (JIRA:RHEL-27840) schedsetaffinity(2) doesn't return -1 for an empty mask (JIRA:RHEL-29540) [EMR] [TBOOT OS] SUT could not go to S3 state with RHEL 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:RHEL-29665) ipoib mcast lockup fix (JIRA:RHEL-29923) ice 0000:6f:00.0: PTP failed to get time (JIRA:RHEL-30108) blk-mq: don't schedule blk-mq kworkers on isolated CPUs (JIRA:RHEL-30418) kernel: tls: handle backlogging of crypto requests (JIRA:RHEL-30450) Kernel panic in skbsegment (JIRA:RHEL-30561) [IBM 9.4 FEAT] Update IBM vNIC Driver (ibmvnic) (JIRA:RHEL-28648) SCTP OOTB scenario in OVS/Netfilter where the SCTP connection can not be recovered by HBREQ/HBACK (JIRA:RHEL-29949)
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/bpftoolto a version that resolves this vulnerability.Fixed in 7.0.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/bpftool-debuginfoto a version that resolves this vulnerability.Fixed in 7.0.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-abi-stableliststo a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-debugto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-debug-develto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-debug-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-debug-uki-virtto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-develto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-docto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-headersto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-toolsto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-uki-virtto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/perfto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/perf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/python3-perfto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/rtlato a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-debuginfo-common-s390xto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-zfcpdumpto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-zfcpdump-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-zfcpdump-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-zfcpdump-develto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-zfcpdump-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-debuginfo-common-ppc64leto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/bpftoolto a version that resolves this vulnerability.Fixed in 7.0.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/bpftool-debuginfoto a version that resolves this vulnerability.Fixed in 7.0.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-core-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-core-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-debuginfo-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-devel-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-devel-matched-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-modules-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-modules-core-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-modules-extra-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debuginfo-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-devel-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-devel-matched-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-modules-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-modules-core-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-modules-extra-5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-debugto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-debug-develto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-debug-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-debuginfo-common-aarch64to a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-develto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-headersto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-toolsto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/perfto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/perf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/python3-perfto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/rtlato a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-cross-headersto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2 - Upgrade
Upgrade
redhat/kernel-cross-headersto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa - Upgrade
Upgrade
redhat/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 5.14.0-284.62.1.el9_2.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1881?
The severity of RHSA-2024:1881 is moderate, focusing on kernel security and bug fix updates.
How do I fix RHSA-2024:1881?
To fix RHSA-2024:1881, update your kernel packages to the latest version as specified by the advisory.
What vulnerabilities does RHSA-2024:1881 address?
RHSA-2024:1881 addresses vulnerabilities including the Marvin side-channel leakage in the RSA decryption operation (CVE-2023-6240).
What systems are affected by RHSA-2024:1881?
RHSA-2024:1881 affects various Red Hat systems running the kernel version 5.14.0-284.62.1.el9_2.
Is RHSA-2024:1881 applicable to all Red Hat products?
No, RHSA-2024:1881 is specifically relevant to certain versions of Red Hat Enterprise Linux and its derivatives.