RHSA-2024:0897
Vulnerability Summary
Timeline
Description
Red Hat Security Advisory: kernel security update
CVSS Metrics
- v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Systems
- redhat•bpftool
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•bpftool-debuginfo
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-abi-stablelists
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-core
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-debug
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-debug-core
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-debug-debuginfo
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-debug-devel
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-debug-modules
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-debug-modules-extra
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-debuginfo
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-debuginfo-common-aarch64
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-debuginfo-common-ppc64le
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-debuginfo-common-s390x
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-debuginfo-common-x86_64
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-devel
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-doc
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-modules
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-modules-extra
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-tools
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-tools-debuginfo
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-tools-libs
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-tools-libs-devel
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-zfcpdump
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-zfcpdump-core
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-zfcpdump-debuginfo
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-zfcpdump-devel
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-zfcpdump-modules
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•kernel-zfcpdump-modules-extra
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•perf
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•perf-debuginfo
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•python3-perf
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
- redhat•python3-perf-debuginfo
< 0:4.18.0-513.18.1.el8_9 | < 0:4.18.0-513.18.1.el8_9
References (100)
- https://access.redhat.com/errata/RHSA-2024:0897
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2087568
- https://bugzilla.redhat.com/show_bug.cgi?id=2144379
- https://bugzilla.redhat.com/show_bug.cgi?id=2161310
- https://bugzilla.redhat.com/show_bug.cgi?id=2173403
- https://bugzilla.redhat.com/show_bug.cgi?id=2187813
- https://bugzilla.redhat.com/show_bug.cgi?id=2187931
- https://bugzilla.redhat.com/show_bug.cgi?id=2231800
- https://bugzilla.redhat.com/show_bug.cgi?id=2237757
- https://bugzilla.redhat.com/show_bug.cgi?id=2244723
- https://bugzilla.redhat.com/show_bug.cgi?id=2245514
- https://bugzilla.redhat.com/show_bug.cgi?id=2246944
- https://bugzilla.redhat.com/show_bug.cgi?id=2246945
- https://bugzilla.redhat.com/show_bug.cgi?id=2253611
- https://bugzilla.redhat.com/show_bug.cgi?id=2253614
- https://bugzilla.redhat.com/show_bug.cgi?id=2253908
- https://bugzilla.redhat.com/show_bug.cgi?id=2254052
- https://bugzilla.redhat.com/show_bug.cgi?id=2254053
- https://bugzilla.redhat.com/show_bug.cgi?id=2254054
- https://bugzilla.redhat.com/show_bug.cgi?id=2255139
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0897.json
- https://access.redhat.com/security/cve/CVE-2022-3545
- https://www.cve.org/CVERecord?id=CVE-2022-3545
- https://nvd.nist.gov/vuln/detail/CVE-2022-3545
- https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=02e1a114fdb71e59ee6770294166c30d437bf86a
- https://access.redhat.com/security/cve/CVE-2022-41858
- https://www.cve.org/CVERecord?id=CVE-2022-41858
- https://nvd.nist.gov/vuln/detail/CVE-2022-41858
- https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798
- https://access.redhat.com/security/cve/CVE-2023-1073
- https://www.cve.org/CVERecord?id=CVE-2023-1073
- https://nvd.nist.gov/vuln/detail/CVE-2023-1073
- https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=b12fece4c64857e5fab4290bf01b2e0317a88456
- https://www.openwall.com/lists/oss-security/2023/01/17/3
- https://access.redhat.com/security/cve/CVE-2023-1838
- https://www.cve.org/CVERecord?id=CVE-2023-1838
- https://nvd.nist.gov/vuln/detail/CVE-2023-1838
- https://lore.kernel.org/netdev/20220516084213.26854-1-jasowang@redhat.com/T/
- https://access.redhat.com/security/cve/CVE-2023-2166
- https://www.cve.org/CVERecord?id=CVE-2023-2166
- https://nvd.nist.gov/vuln/detail/CVE-2023-2166
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0acc442309a0a1b01bcdaa135e56e6398a49439c
- https://access.redhat.com/security/cve/CVE-2023-2176
- https://www.cve.org/CVERecord?id=CVE-2023-2176
- https://nvd.nist.gov/vuln/detail/CVE-2023-2176
- https://www.spinics.net/lists/linux-rdma/msg114749.html
- https://access.redhat.com/security/cve/CVE-2023-4623
- https://www.cve.org/CVERecord?id=CVE-2023-4623
- https://nvd.nist.gov/vuln/detail/CVE-2023-4623
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b3d26c5702c7d6c45456326e56d2ccf3f103e60f
- https://access.redhat.com/security/cve/CVE-2023-4921
- https://www.cve.org/CVERecord?id=CVE-2023-4921
- https://nvd.nist.gov/vuln/detail/CVE-2023-4921
- https://github.com/torvalds/linux/commit/8fc134fee27f2263988ae38920bc03da416b03d8
- https://access.redhat.com/security/cve/CVE-2023-5717
- https://www.cve.org/CVERecord?id=CVE-2023-5717
- https://nvd.nist.gov/vuln/detail/CVE-2023-5717
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/kernel/events?id=32671e3799ca2e4590773fd0e63aaa4229e50c06
- https://access.redhat.com/security/cve/CVE-2023-6356
- https://www.cve.org/CVERecord?id=CVE-2023-6356
- https://nvd.nist.gov/vuln/detail/CVE-2023-6356
- https://access.redhat.com/security/cve/CVE-2023-6535
- https://www.cve.org/CVERecord?id=CVE-2023-6535
- https://nvd.nist.gov/vuln/detail/CVE-2023-6535
- https://access.redhat.com/security/cve/CVE-2023-6536
- https://www.cve.org/CVERecord?id=CVE-2023-6536
- https://nvd.nist.gov/vuln/detail/CVE-2023-6536
- https://access.redhat.com/security/cve/CVE-2023-6606
- https://www.cve.org/CVERecord?id=CVE-2023-6606
- https://nvd.nist.gov/vuln/detail/CVE-2023-6606
- https://bugzilla.kernel.org/show_bug.cgi?id=218218
- https://access.redhat.com/security/cve/CVE-2023-6610
- https://www.cve.org/CVERecord?id=CVE-2023-6610
- https://nvd.nist.gov/vuln/detail/CVE-2023-6610
- https://bugzilla.kernel.org/show_bug.cgi?id=218219
- https://access.redhat.com/security/cve/CVE-2023-6817
- https://www.cve.org/CVERecord?id=CVE-2023-6817
- https://nvd.nist.gov/vuln/detail/CVE-2023-6817
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=317eb9685095678f2c9f5a8189de698c5354316a
- https://access.redhat.com/security/cve/CVE-2023-40283
- https://www.cve.org/CVERecord?id=CVE-2023-40283
- https://nvd.nist.gov/vuln/detail/CVE-2023-40283
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1728137b33c00d5a2b5110ed7aafb42e7c32e4a1
- https://access.redhat.com/security/cve/CVE-2023-45871
- https://www.cve.org/CVERecord?id=CVE-2023-45871
- https://nvd.nist.gov/vuln/detail/CVE-2023-45871
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=bb5ed01cd2428cd25b1c88a3a9cba87055eb289f
- https://access.redhat.com/security/cve/CVE-2023-46813
- https://www.cve.org/CVERecord?id=CVE-2023-46813
- https://nvd.nist.gov/vuln/detail/CVE-2023-46813
- https://bugzilla.suse.com/show_bug.cgi?id=1212649
- https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.9
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=63e44bc52047f182601e7817da969a105aa1f721
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a37cd2a59d0cb270b1bba568fd3a3b8668b9d3ba
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b9cb9c45583b911e0db71d09caa6b56469eb2bdf
- https://access.redhat.com/security/cve/CVE-2024-0646
- https://www.cve.org/CVERecord?id=CVE-2024-0646
- https://nvd.nist.gov/vuln/detail/CVE-2024-0646
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267