RHSA-2024:4108: Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: netfilter: nftables: use timestamp to check for set element timeout (CVE-2024-27397) kernel: xen-netfront: Add missing skbmarkforrecycle (CVE-2024-27393) kernel: netfilter: nftflowoffload: reset dst in route object after setting up flow (CVE-2024-27403) kernel: smb: client: fix UAF in smb2reconnectserver() (CVE-2024-35870) kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960) kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958) kernel: net: hns3: do not allow call hns3nicnetopen repeatedly (CVE-2021-47400) kernel: octeontx2-af: avoid off-by-one read from userspace (CVE-2024-36957) Bug Fix(es): lpfc updates for rh9.4 - (14.2.0.15 14.2.0.16 patches) (JIRA:RHEL-35144) cifs - kernel panic with cifsputsmbses (JIRA:RHEL-25787) Rhel-9.2- observed "vas: Failed reconfig VAS capabilities with DLPAR " message while running proc add rem mix operations in shared mode[5.14.0-252.el9.ppc64le][P9] (JIRA:RHEL-34086) CNB95: dpll: rebase DPLL to upstream v6.8 (JIRA:RHEL-36570) Boot process stalls during initial loading of RHEL9.2 between the 59th and 100th AC cycle (JIRA:RHEL-36681) ice: DPLL-related fixes (JIRA:RHEL-36714) [HPE RHEL 9.2 BUG] x86/platform/uv: UV support for sub-NUMA clustering (JIRA:RHEL-37595) CNB95: net/sched: update TC core to upstream v6.8 (JIRA:RHEL-37640) [ice] Entering Safe Mode because DDP package could not be loaded and hit panic then (JIRA:RHEL-38906) [ice] Add automatic VF reset on Tx MDD events (JIRA:RHEL-39082) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

— Red Hat