RHSA-2024:3530: Important: kernel-rt security and bug fix update
Important: kernel-rt security and bug fix update
Other sources
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.Security Fix(es): kernel: nftables: use-after-free vulnerability in the nftverdictinit() function (CVE-2024-1086) kernel: net: bridge: data races indata-races in brhandleframefinish() (CVE-2023-52578) Bug Fix(es): kernel-rt: update RT source tree to the latest RHEL-8.4.z Batch 25 (JIRA:RHEL-36724) [RHEL-8.4] kernel-rt-debug: BUG: sleeping function called from invalid context at kernel/locking/rtmutex.c:968 (JIRA:RHEL-8758) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:3530?
RHSA-2024:3530 is classified as important due to a use-after-free vulnerability in the Real Time Linux Kernel.
How do I fix RHSA-2024:3530?
To fix RHSA-2024:3530, update to the kernel-rt package version 4.18.0-305.131.1.rt7.207.el8_4 or higher.
What systems are affected by RHSA-2024:3530?
RHSA-2024:3530 affects Red Hat Enterprise Linux for Real Time - Telecommunications Update Service and Red Hat Enterprise Linux for Real Time for NFV.
What type of vulnerability is addressed in RHSA-2024:3530?
RHSA-2024:3530 addresses a use-after-free vulnerability in the nf_tables implementation of the Linux kernel.
Are there any specific packages I need to update for RHSA-2024:3530?
You need to update kernel-rt, kernel-rt-core, kernel-rt-debug, and several related packages to resolve RHSA-2024:3530.