RHSA-2024:4823: Important: kernel security update

First published: Wed Jul 24 2024(Updated: )

<li> kernel: vmwgfx: multiple flaws (CVE-2022-36402, CVE-2022-40133, CVE-2022-38457, CVE-2023-5633)</li> <li> kernel: nftables: (CVE-2024-26581)</li> <li> kernel: uio: (CVE-2023-52439)</li> <li> kernel: smb: (CVE-2023-52434)</li> <li> kernel: intel: (CVE-2023-52450)</li> <li> kernel: net: multiple flaws (CVE-2023-52578, CVE-2024-36978, CVE-2022-48743)</li> <li> kernel: Bluetooth: (CVE-2023-52518)</li> <li> kernel: netfilter: multiple flaws (CVE-2024-26668, CVE-2024-26808, CVE-2024-26925, CVE-2024-27020, CVE-2024-27019, CVE-2024-27016, CVE-2024-27065, CVE-2024-35899, CVE-2024-35897)</li> <li> kernel: hv_netvsc: (CVE-2024-26698)</li> <li> kernel: ext4: multiple flaws (CVE-2024-26704, CVE-2024-26773)</li> <li> kernel: net/sched: (CVE-2024-26739)</li> <li> kernel: vfio/pci: (CVE-2024-26810)</li> <li> kernel: dm: (CVE-2024-26880)</li> <li> kernel: x86/xen: (CVE-2024-26908)</li> <li> kernel: af_unix: multiple flaws (CVE-2024-26923, CVE-2024-38596)</li> <li> kernel: scsi: multiple flaws (CVE-2024-26931, CVE-2024-26929, CVE-2023-52811, CVE-2024-36025, CVE-2024-36924, CVE-2024-36952)</li> <li> kernel: Squashfs: (CVE-2024-26982)</li> <li> kernel: KVM: (CVE-2024-35791)</li> <li> kernel: ipv6: (CVE-2024-27417)</li> <li> kernel: drm/client: (CVE-2024-35950)</li> <li> kernel: sched/psi: (CVE-2023-52707)</li> <li> kernel: can: (CVE-2021-47459)</li> <li> kernel: tcp: (CVE-2024-36904)</li> <li> kernel: tls: (CVE-2024-36489)</li> <li> The kernel packages contain the Linux kernel, the core of any Linux operating system.</li> <li> Security Fix(es):</li> <li> * kernel: vmwgfx: race condition leading to information disclosure vulnerability (CVE-2023-33951,ZDI-23-707,ZDI-CAN-20110)</li> <li> * kernel: vmwgfx: double free within the handling of vmw_buffer_object objects (CVE-2023-33952,ZDI-23-708,ZDI-CAN-20292)</li> <li> * kernel: stack overflow problem in Open vSwitch kernel module leading to DoS (CVE-2024-1151)</li> <li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</li>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/weakness
• agent/last-modified-date
• agent/title
• agent/references
• agent/remedy
• agent/type
• agent/event
• agent/first-publish-date
• collector/redhat-errata-latest
• source/Red Hat
• anchor-id/RHSA-2024:4823
• agent/software-canonical-lookup
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/description
• collector/redhat-errata
• vendor/red hat
• canonical/red hat red hat enterprise linux for power, little endian - extended update support
• canonical/red hat red hat enterprise linux for ibm z systems - extended update support
• canonical/red hat red hat enterprise linux for x86_64 - extended update support
• canonical/red hat red hat enterprise linux server for power le - update services for sap solutions
• canonical/red hat red hat enterprise linux server for arm 64 - 4 years of updates
• canonical/red hat red hat codeready linux builder for x86_64 - extended update support
• canonical/red hat red hat enterprise linux for x86_64 - update services for sap solutions
• canonical/red hat red hat enterprise linux server - aus
• canonical/red hat red hat enterprise linux server for ibm z systems - 4 years of updates
• canonical/red hat red hat codeready linux builder for ibm z systems - extended update support
• canonical/red hat red hat codeready linux builder for arm 64 - extended update support
• canonical/red hat red hat enterprise linux for arm 64 - extended update support
• canonical/red hat red hat codeready linux builder for power, little endian - extended update support
• package-manager/redhat