RHSA-2024:2845: Moderate: kernel security and bug fix update
Published May 15, 2024
·Updated
Moderate: kernel security and bug fix update
Other sources
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744) kernel: netfilter: nftables: exthdr: fix 4-byte stack OOB write (CVE-2023-52628) Bug Fix(es): kernel: untrusted VMM can trigger int80 syscall handling (JIRA:RHEL-30266) kernel: netfilter: nftables: exthdr: fix 4-byte stack OOB write (JIRA:RHEL-31090)
— Red Hat
Affected Software
158 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
redhat/kernel<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/bpftool<7.0.0-284.66.1.el9_2
7.0.0-284.66.1.el9_2
redhat/bpftool-debuginfo<7.0.0-284.66.1.el9_2
7.0.0-284.66.1.el9_2
redhat/kernel<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-abi-stablelists<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-devel<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-devel-matched<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-modules<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-modules-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-modules-extra<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-uki-virt<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-devel<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-devel-matched<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-doc<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-headers<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-modules<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-modules-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-modules-extra<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-tools<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-tools-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-tools-libs<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-uki-virt<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/perf<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/perf-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/python3-perf<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/python3-perf-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/rtla<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/bpftool<7.0.0-284.66.1.el9_2
7.0.0-284.66.1.el9_2
redhat/bpftool-debuginfo<7.0.0-284.66.1.el9_2
7.0.0-284.66.1.el9_2
redhat/kernel-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-devel<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-devel-matched<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-modules<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-modules-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-modules-extra<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debuginfo-common-s390x<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-devel<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-devel-matched<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-headers<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-modules<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-modules-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-modules-extra<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-tools<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-tools-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-zfcpdump<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-zfcpdump-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-zfcpdump-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-zfcpdump-devel<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-zfcpdump-devel-matched<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-zfcpdump-modules<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-zfcpdump-modules-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-zfcpdump-modules-extra<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/perf<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/perf-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/python3-perf<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/python3-perf-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/rtla<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/bpftool<7.0.0-284.66.1.el9_2
7.0.0-284.66.1.el9_2
redhat/bpftool-debuginfo<7.0.0-284.66.1.el9_2
7.0.0-284.66.1.el9_2
redhat/kernel<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-devel<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-devel-matched<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-modules<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-modules-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debug-modules-extra<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-debuginfo-common-ppc64le<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-devel<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-devel-matched<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-headers<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-modules<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-modules-core<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-modules-extra<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-tools<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-tools-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-tools-libs<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/perf<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/perf-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/python3-perf<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/python3-perf-debuginfo<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/rtla<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/bpftool<7.0.0-284.66.1.el9_2.aa
7.0.0-284.66.1.el9_2.aa
redhat/bpftool-debuginfo<7.0.0-284.66.1.el9_2.aa
7.0.0-284.66.1.el9_2.aa
redhat/kernel<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-5.14.0-284.66.1.el9_2.aa
64k-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-core-5.14.0-284.66.1.el9_2.aa
64k-core-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-debug-5.14.0-284.66.1.el9_2.aa
64k-debug-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-debug-core-5.14.0-284.66.1.el9_2.aa
64k-debug-core-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-debug-debuginfo-5.14.0-284.66.1.el9_2.aa
64k-debug-debuginfo-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-debug-devel-5.14.0-284.66.1.el9_2.aa
64k-debug-devel-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-debug-devel-matched-5.14.0-284.66.1.el9_2.aa
64k-debug-devel-matched-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-debug-modules-5.14.0-284.66.1.el9_2.aa
64k-debug-modules-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-debug-modules-core-5.14.0-284.66.1.el9_2.aa
64k-debug-modules-core-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-debug-modules-extra-5.14.0-284.66.1.el9_2.aa
64k-debug-modules-extra-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-debuginfo-5.14.0-284.66.1.el9_2.aa
64k-debuginfo-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-devel-5.14.0-284.66.1.el9_2.aa
64k-devel-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-devel-matched-5.14.0-284.66.1.el9_2.aa
64k-devel-matched-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-modules-5.14.0-284.66.1.el9_2.aa
64k-modules-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-modules-core-5.14.0-284.66.1.el9_2.aa
64k-modules-core-5.14.0-284.66.1.el9_2.aa
redhat/kernel<64k-modules-extra-5.14.0-284.66.1.el9_2.aa
64k-modules-extra-5.14.0-284.66.1.el9_2.aa
redhat/kernel-core<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-debug<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-debug-core<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-debug-debuginfo<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-debug-devel<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-debug-devel-matched<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-debug-modules<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-debug-modules-core<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-debug-modules-extra<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-debuginfo<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-debuginfo-common-aarch64<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-devel<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-devel-matched<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-headers<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-modules<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-modules-core<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-modules-extra<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-tools<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-tools-debuginfo<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-tools-libs<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/perf<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/perf-debuginfo<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/python3-perf<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/python3-perf-debuginfo<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/rtla<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-cross-headers<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-tools-libs-devel<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-cross-headers<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-tools-libs-devel<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-cross-headers<5.14.0-284.66.1.el9_2
5.14.0-284.66.1.el9_2
redhat/kernel-cross-headers<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
redhat/kernel-tools-libs-devel<5.14.0-284.66.1.el9_2.aa
5.14.0-284.66.1.el9_2.aa
Remediation
Event History
May 15, 2024
Advisory Published
via Red Hat·12:13 AM
Jun 4, 2026
Advisory Published
via Red Hat·10:17 PM
Data Sourced
via Red Hat·10:17 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2024:2845?
The severity of RHSA-2024:2845 is classified as moderate.
2
How do I fix RHSA-2024:2845?
To fix RHSA-2024:2845, update the affected kernel packages to version 5.14.0-284.66.1.el9_2 or higher.
3
What systems are affected by RHSA-2024:2845?
RHSA-2024:2845 affects Red Hat Enterprise Linux and related products utilizing kernel versions prior to the update.
4
What vulnerabilities are addressed in RHSA-2024:2845?
RHSA-2024:2845 addresses vulnerabilities including CVE-2024-25744 related to untrusted VMM triggering int80 syscall handling.
5
Is it safe to apply the update for RHSA-2024:2845?
Yes, applying the update for RHSA-2024:2845 is safe and it is recommended to secure your systems.