RHSA-2024:0930

Description

Red Hat Security Advisory: kernel security update

CVSS Metrics

• v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

• redhat•bpftool

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•bpftool-debuginfo

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-abi-stablelists

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-core

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-debug

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-debug-core

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-debug-debuginfo

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-debug-devel

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-debug-modules

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-debug-modules-extra

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-debuginfo

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-debuginfo-common-aarch64

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-debuginfo-common-ppc64le

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-debuginfo-common-s390x

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-debuginfo-common-x86_64

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-devel

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-doc

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-modules

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-modules-extra

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-tools

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-tools-debuginfo

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-tools-libs

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-tools-libs-devel

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-zfcpdump

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-zfcpdump-core

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-zfcpdump-debuginfo

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-zfcpdump-devel

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-zfcpdump-modules

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•kernel-zfcpdump-modules-extra

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•perf

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•perf-debuginfo

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•python3-perf

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

• redhat•python3-perf-debuginfo

  < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6 | < 0:4.18.0-372.93.1.el8_6

References (90)

• https://access.redhat.com/errata/RHSA-2024:0930
• https://access.redhat.com/security/updates/classification/#important
• https://bugzilla.redhat.com/show_bug.cgi?id=2062284
• https://bugzilla.redhat.com/show_bug.cgi?id=2088021
• https://bugzilla.redhat.com/show_bug.cgi?id=2108691
• https://bugzilla.redhat.com/show_bug.cgi?id=2123695
• https://bugzilla.redhat.com/show_bug.cgi?id=2127985
• https://bugzilla.redhat.com/show_bug.cgi?id=2133451
• https://bugzilla.redhat.com/show_bug.cgi?id=2133452
• https://bugzilla.redhat.com/show_bug.cgi?id=2133453
• https://bugzilla.redhat.com/show_bug.cgi?id=2133455
• https://bugzilla.redhat.com/show_bug.cgi?id=2144720
• https://bugzilla.redhat.com/show_bug.cgi?id=2160023
• https://bugzilla.redhat.com/show_bug.cgi?id=2173430
• https://bugzilla.redhat.com/show_bug.cgi?id=2188468
• https://bugzilla.redhat.com/show_bug.cgi?id=2213139
• https://bugzilla.redhat.com/show_bug.cgi?id=2252731
• https://bugzilla.redhat.com/show_bug.cgi?id=2255498
• https://bugzilla.redhat.com/show_bug.cgi?id=2259866
• https://bugzilla.redhat.com/show_bug.cgi?id=2262126
• https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0930.json
• https://access.redhat.com/security/cve/CVE-2021-33655
• https://www.cve.org/CVERecord?id=CVE-2021-33655
• https://nvd.nist.gov/vuln/detail/CVE-2021-33655
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=086ff84617185393a0bbf25830c4f36412a7d3f4
• https://access.redhat.com/security/cve/CVE-2022-2196
• https://www.cve.org/CVERecord?id=CVE-2022-2196
• https://nvd.nist.gov/vuln/detail/CVE-2022-2196
• https://access.redhat.com/security/cve/CVE-2022-3239
• https://www.cve.org/CVERecord?id=CVE-2022-3239
• https://nvd.nist.gov/vuln/detail/CVE-2022-3239
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c08eadca1bdfa099e20a32f8fa4b52b2f672236d
• https://access.redhat.com/security/cve/CVE-2022-3625
• https://www.cve.org/CVERecord?id=CVE-2022-3625
• https://nvd.nist.gov/vuln/detail/CVE-2022-3625
• https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=6b4db2e528f650c7fb712961aac36455468d5902
• https://access.redhat.com/security/cve/CVE-2022-20368
• https://www.cve.org/CVERecord?id=CVE-2022-20368
• https://nvd.nist.gov/vuln/detail/CVE-2022-20368
• https://access.redhat.com/security/cve/CVE-2022-23960
• https://www.cve.org/CVERecord?id=CVE-2022-23960
• https://nvd.nist.gov/vuln/detail/CVE-2022-23960
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb
• https://access.redhat.com/security/cve/CVE-2022-29581
• https://www.cve.org/CVERecord?id=CVE-2022-29581
• https://nvd.nist.gov/vuln/detail/CVE-2022-29581
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3db09e762dc79584a69c10d74a6b98f89a9979f8
• https://kernel.dance/#3db09e762dc79584a69c10d74a6b98f89a9979f8
• https://access.redhat.com/security/cve/CVE-2022-36402
• https://www.cve.org/CVERecord?id=CVE-2022-36402
• https://nvd.nist.gov/vuln/detail/CVE-2022-36402
• https://access.redhat.com/security/cve/CVE-2022-38096
• https://www.cve.org/CVERecord?id=CVE-2022-38096
• https://nvd.nist.gov/vuln/detail/CVE-2022-38096
• https://access.redhat.com/security/cve/CVE-2022-38457
• https://www.cve.org/CVERecord?id=CVE-2022-38457
• https://nvd.nist.gov/vuln/detail/CVE-2022-38457
• https://access.redhat.com/security/cve/CVE-2022-40133
• https://www.cve.org/CVERecord?id=CVE-2022-40133
• https://nvd.nist.gov/vuln/detail/CVE-2022-40133
• https://access.redhat.com/security/cve/CVE-2023-1074
• https://www.cve.org/CVERecord?id=CVE-2023-1074
• https://nvd.nist.gov/vuln/detail/CVE-2023-1074
• https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=458e279f861d3f61796894cd158b780765a1569f
• https://www.openwall.com/lists/oss-security/2023/01/23/1
• https://access.redhat.com/security/cve/CVE-2023-6546
• https://www.cve.org/CVERecord?id=CVE-2023-6546
• https://nvd.nist.gov/vuln/detail/CVE-2023-6546
• https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e3
• https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527
• https://access.redhat.com/security/cve/CVE-2023-6931
• https://www.cve.org/CVERecord?id=CVE-2023-6931
• https://nvd.nist.gov/vuln/detail/CVE-2023-6931
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b
• https://access.redhat.com/security/cve/CVE-2023-30456
• https://www.cve.org/CVERecord?id=CVE-2023-30456
• https://nvd.nist.gov/vuln/detail/CVE-2023-30456
• https://access.redhat.com/security/cve/CVE-2023-31084
• https://www.cve.org/CVERecord?id=CVE-2023-31084
• https://nvd.nist.gov/vuln/detail/CVE-2023-31084
• https://access.redhat.com/security/cve/CVE-2023-51042
• https://www.cve.org/CVERecord?id=CVE-2023-51042
• https://nvd.nist.gov/vuln/detail/CVE-2023-51042
• https://github.com/torvalds/linux/commit/2e54154b9f27262efd0cb4f903cc7d5ad1fe9628
• https://access.redhat.com/security/cve/CVE-2024-1086
• https://www.cve.org/CVERecord?id=CVE-2024-1086
• https://nvd.nist.gov/vuln/detail/CVE-2024-1086
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660
• https://kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog