RHSA-2024:5364: Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: gfs2: Fix kernel NULL pointer dereference in gfs2rgrpdump (CVE-2023-52448) kernel: wifi: ath9k: delay all of ath9kwmieventtasklet() until init is complete (CVE-2024-26897) kernel: net: ice: Fix potential NULL pointer dereference in icebridgesetlink() (CVE-2024-26855) kernel: wifi: rtl8xxxu: add cancelworksync() for c2hcmdwork (CVE-2024-27052) kernel: nfp: flower: handle actinetdevs allocation failure (CVE-2024-27046) kernel: wifi: ath10k: fix NULL pointer dereference in ath10kwmitlvoppullmgmttxcomplev() (CVE-2023-52651) kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823) kernel: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (CVE-2024-35789) kernel: mlxsw: spectrumacltcam: Fix memory leak when canceling rehash work (CVE-2024-35852) kernel: wifi: iwlwifi: dbg-tlv: ensure NUL termination (CVE-2024-35845) kernel: mlxbfgige: call requestirq() after NAPI initialized (CVE-2024-35907) kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937) kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383) kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864) kernel: cxl/port: Fix deleteendpoint() vs parent unregistration race (CVE-2023-52771) kernel: wifi: nl80211: don't free NULL coalescing rule (CVE-2024-36941) kernel: wifi: iwlwifi: read txq->readptr under lock (CVE-2024-36922) kernel: net: CVE-2024-36971 kernel: UAF in network route management (CVE-2024-36971) kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586) kernel: net/mlx5: Add a timeout to acquire the command queue semaphore (CVE-2024-38556) kernel: net/mlx5: Discard command completions in internal error (CVE-2024-38555) kernel: net: bridge: xmit: make sure we have at least eth header len bytes (CVE-2024-38538) kernel: stm class: Fix a double free in stmregisterdevice() (CVE-2024-38627) Bug Fix(es): [REGRESSION] skmemoryallocated counter leaking on aarch64 (JIRA:RHEL-36775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

— Red Hat