RHSA-2024:2394: Important: kernel security, bug fix, and enhancement update
Important: kernel security, bug fix, and enhancement update
Other sources
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546) kernel: multiple use-after-free vulnerabilities (CVE-2024-1086, CVE-2023-3567, CVE-2023-4133, CVE-2023-6932, CVE-2023-39198, CVE-2023-51043, CVE-2023-51779, CVE-2023-51780, CVE-2024-1085, CVE-2024-26582) kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555) kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480) kernel: multiple NULL pointer dereference vulnerabilities (CVE-2022-38096, CVE-2023-6622, CVE-2023-6915, CVE-2023-42754, CVE-2023-46862, CVE-2023-52574, CVE-2024-0841, CVE-2023-52448) kernel: integer overflow in l2capconfigreq() in net/bluetooth/l2capcore.c (CVE-2022-45934) kernel: netfilter: nftables: out-of-bounds access in nftablesnewtable() (CVE-2023-6040) kernel: GC's deletion of an SKB races with unixstreamreadgeneric() leading to UAF (CVE-2023-6531) kernel: Out of boundary write in perfreadgroup() as result of overflow a perfevent's readsize (CVE-2023-6931) kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses (CVE-2023-24023) kernel: irdma: Improper access control (CVE-2023-25775) Kernel: double free in hciconncleanup of the bluetooth subsystem (CVE-2023-28464) kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hcisync.c (CVE-2023-28866) kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hciuartttyioctl (CVE-2023-31083) kernel: multiple out-of-bounds read vulnerabilities (CVE-2023-37453, CVE-2023-39189, CVE-2023-39193, CVE-2023-6121, CVE-2023-39194) kernel: netfilter: race condition between IPSETCMDADD and IPSETCMDSWAP (CVE-2023-42756) kernel: lib/kobject.c vulnerable to fillkobjpath out-of-bounds write (CVE-2023-45863) kernel: smb: client: fix potential OOBs in smb2parsecontexts() (CVE-2023-52434) kernel: mm/sparsemem: fix race in accessing memorysection->usage (CVE-2023-52489) kernel: net: fix possible store tearing in neighperiodicwork() (CVE-2023-52522) kernel: multiple memory leak vulnerabilities (CVE-2023-52529, CVE-2023-52581) kernel: net: bridge: data races indata-races in brhandleframefinish() (CVE-2023-52578) kernel: net/core: kernel crash in ETHP1588 flow dissector (CVE-2023-52580) kernel: net/sched: actct: fix skb leak and crash on ooo frags (CVE-2023-52610) kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receiveencryptedstandard of client (CVE-2024-0565) kernel: tls: race between async notify and socket close (CVE-2024-26583) kernel: tls: handle backlogging of crypto requests (CVE-2024-26584) kernel: tls: race between tx work scheduling and socket close (CVE-2024-26585) kernel: mlxsw: spectrumacltcam: Fix stack corruption (CVE-2024-26586) kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593) kernel: sched/membarrier: reduce the ability to hammer on sysmembarrier (CVE-2024-26602) kernel: netfilter: nftables: reject QUEUE/DROP verdict parameters (CVE-2024-26609) kernel: local dos vulnerability in scatterwalkcopychunks (CVE-2023-6176) kernel: perf/x86/lbr: Filter vsyscall addresses (CVE-2023-52476) kernel: netfilter: nftables: disallow timeout for anonymous sets (CVE-2023-52620) kernel: ip6tunnel: fix NEXTHDRFRAGMENT handling in ip6tnlparsetlvenclim() (CVE-2024-26633) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/bpftoolto a version that resolves this vulnerability.Fixed in 7.3.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/bpftool-debuginfoto a version that resolves this vulnerability.Fixed in 7.3.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-abi-stableliststo a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-debugto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-debug-develto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-debug-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-debug-uki-virtto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-develto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-docto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-headersto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-debug-kvmto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-develto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-kvmto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-toolsto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-uki-virtto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/libperf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/perfto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/perf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/python3-perfto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/rtlato a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/rvto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-debuginfo-common-s390xto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-zfcpdumpto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-zfcpdump-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-zfcpdump-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-zfcpdump-develto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-zfcpdump-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-debuginfo-common-ppc64leto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/bpftoolto a version that resolves this vulnerability.Fixed in 7.3.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/bpftool-debuginfoto a version that resolves this vulnerability.Fixed in 7.3.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-core-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-core-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-debuginfo-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-devel-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-devel-matched-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-modules-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-modules-core-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-modules-extra-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debuginfo-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-devel-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-devel-matched-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-modules-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-modules-core-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-modules-extra-5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-debugto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-debug-develto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-debug-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-debuginfo-common-aarch64to a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-develto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-headersto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-rt-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-toolsto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/libperf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/perfto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/perf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/python3-perfto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/rtlato a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/rvto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-cross-headersto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/libperfto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
redhat/kernel-cross-headersto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
redhat/libperfto a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4.aa - Upgrade
Upgrade
kernel-5.14.0-427.13.1.el9_4to a version that resolves this vulnerability.Fixed in 5.14.0-427.13.1.el9_4 - Upgrade
Upgrade
bpftool-7.3.0-427.13.1.el9_4to a version that resolves this vulnerability.Fixed in 7.3.0-427.13.1.el9_4
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:2394?
The severity of RHSA-2024:2394 is classified as Important.
How do I fix RHSA-2024:2394?
To fix RHSA-2024:2394, update the kernel packages to version 5.14.0-427.13.1.el9_4 or higher.
What products are affected by RHSA-2024:2394?
RHSA-2024:2394 affects various Red Hat products including Red Hat Enterprise Linux for Power, IBM z Systems, x86_64, and ARM 64.
What vulnerabilities are addressed in RHSA-2024:2394?
RHSA-2024:2394 addresses a GSM multiplexing race condition leading to privilege escalation (CVE-2023-6546).
When was RHSA-2024:2394 released?
RHSA-2024:2394 was released on April 18, 2024.