RHSA-2024:2008: Important: kernel-rt security update
Important: kernel-rt security update
Other sources
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.<br>Security Fix(es):<br><li> kernel: use-after-free in smb2isstatusiotimeout() (CVE-2023-1192)</li> <li> kernel: vmxnet3: NULL pointer dereference in vmxnet3rqcleanup() (CVE-2023-4459)</li> <li> kernel: tun: bugs for oversize packet when napi frags enabled in tunnapiallocfrags (CVE-2023-3812)</li> <li> kernel: refcount leak in ctnetlinkcreateconntrack() (CVE-2023-7192)</li> <li> kernel: mlxsw: spectrumacltcam: Fix stack corruption (CVE-2024-26586)</li> <li> kernel: netfilter: divide error in nftlimitinit (CVE-2021-46915)</li> <li> kernel: sched/membarrier: reduce the ability to hammer on sysmembarrier (CVE-2024-26602)</li>
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:2008?
The severity of RHSA-2024:2008 is categorized as Important.
How do I fix RHSA-2024:2008?
To fix RHSA-2024:2008, update to kernel-rt version 4.18.0-193.133.1.rt13.184.el8_2 or later.
What software is affected by RHSA-2024:2008?
RHSA-2024:2008 affects various Red Hat Enterprise Linux for Real Time packages including kernel-rt and its related modules.
What vulnerabilities does RHSA-2024:2008 address?
RHSA-2024:2008 addresses a use-after-free vulnerability in smb2_is_status_io_timeout() identified as CVE-2023-1192.
When was RHSA-2024:2008 released?
RHSA-2024:2008 was released on a date defined by Red Hat as part of their security advisories.