RHSA-2024:1250

Description

Red Hat Security Advisory: kernel security and bug fix update

CVSS Metrics

• v3.1•HIGH•Score: 8.2CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected Systems

• redhat•bpftool

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•bpftool-debuginfo

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-abi-stablelists

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-core

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-debug

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-debug-core

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-debug-debuginfo

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-debug-devel

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-debug-devel-matched

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-debug-modules

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-debug-modules-extra

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-debuginfo

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-debuginfo-common-aarch64

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-debuginfo-common-ppc64le

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-debuginfo-common-s390x

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-debuginfo-common-x86_64

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-devel

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-devel-matched

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-doc

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-modules

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-modules-extra

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-tools

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-tools-debuginfo

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-tools-libs

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-tools-libs-devel

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-zfcpdump

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-zfcpdump-core

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-zfcpdump-debuginfo

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-zfcpdump-devel

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-zfcpdump-devel-matched

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-zfcpdump-modules

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•kernel-zfcpdump-modules-extra

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•perf

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•perf-debuginfo

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•python3-perf

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

• redhat•python3-perf-debuginfo

  < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0 | < 0:5.14.0-70.93.2.el9_0

References (111)

• https://access.redhat.com/errata/RHSA-2024:1250
• https://access.redhat.com/security/updates/classification/#important
• https://bugzilla.redhat.com/show_bug.cgi?id=2049700
• https://bugzilla.redhat.com/show_bug.cgi?id=2133452
• https://bugzilla.redhat.com/show_bug.cgi?id=2154178
• https://bugzilla.redhat.com/show_bug.cgi?id=2161310
• https://bugzilla.redhat.com/show_bug.cgi?id=2187813
• https://bugzilla.redhat.com/show_bug.cgi?id=2187931
• https://bugzilla.redhat.com/show_bug.cgi?id=2213260
• https://bugzilla.redhat.com/show_bug.cgi?id=2215502
• https://bugzilla.redhat.com/show_bug.cgi?id=2219268
• https://bugzilla.redhat.com/show_bug.cgi?id=2223949
• https://bugzilla.redhat.com/show_bug.cgi?id=2225201
• https://bugzilla.redhat.com/show_bug.cgi?id=2230042
• https://bugzilla.redhat.com/show_bug.cgi?id=2230094
• https://bugzilla.redhat.com/show_bug.cgi?id=2231800
• https://bugzilla.redhat.com/show_bug.cgi?id=2237760
• https://bugzilla.redhat.com/show_bug.cgi?id=2240249
• https://bugzilla.redhat.com/show_bug.cgi?id=2246945
• https://bugzilla.redhat.com/show_bug.cgi?id=2253908
• https://bugzilla.redhat.com/show_bug.cgi?id=2255283
• https://bugzilla.redhat.com/show_bug.cgi?id=2255498
• https://bugzilla.redhat.com/show_bug.cgi?id=2256279
• https://bugzilla.redhat.com/show_bug.cgi?id=2267695
• https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1250.json
• https://access.redhat.com/security/cve/CVE-2022-0480
• https://www.cve.org/CVERecord?id=CVE-2022-0480
• https://nvd.nist.gov/vuln/detail/CVE-2022-0480
• https://github.com/kata-containers/kata-containers/issues/3373
• https://lore.kernel.org/linux-mm/20210902215519.AWcuVc3li%25akpm@linux-foundation.org/
• https://access.redhat.com/security/cve/CVE-2022-3545
• https://www.cve.org/CVERecord?id=CVE-2022-3545
• https://nvd.nist.gov/vuln/detail/CVE-2022-3545
• https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=02e1a114fdb71e59ee6770294166c30d437bf86a
• https://access.redhat.com/security/cve/CVE-2022-38096
• https://www.cve.org/CVERecord?id=CVE-2022-38096
• https://nvd.nist.gov/vuln/detail/CVE-2022-38096
• https://access.redhat.com/security/cve/CVE-2022-40982
• https://access.redhat.com/solutions/7027704
• https://www.cve.org/CVERecord?id=CVE-2022-40982
• https://nvd.nist.gov/vuln/detail/CVE-2022-40982
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html
• https://access.redhat.com/security/cve/CVE-2023-1192
• https://www.cve.org/CVERecord?id=CVE-2023-1192
• https://nvd.nist.gov/vuln/detail/CVE-2023-1192
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d527f51331cace562393a8038d870b3e9916686fCVE-2023-52
• https://access.redhat.com/security/cve/CVE-2023-2163
• https://www.cve.org/CVERecord?id=CVE-2023-2163
• https://nvd.nist.gov/vuln/detail/CVE-2023-2163
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed
• https://access.redhat.com/security/cve/CVE-2023-2166
• https://www.cve.org/CVERecord?id=CVE-2023-2166
• https://nvd.nist.gov/vuln/detail/CVE-2023-2166
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0acc442309a0a1b01bcdaa135e56e6398a49439c
• https://access.redhat.com/security/cve/CVE-2023-2176
• https://www.cve.org/CVERecord?id=CVE-2023-2176
• https://nvd.nist.gov/vuln/detail/CVE-2023-2176
• https://www.spinics.net/lists/linux-rdma/msg114749.html
• https://access.redhat.com/security/cve/CVE-2023-3268
• https://www.cve.org/CVERecord?id=CVE-2023-3268
• https://nvd.nist.gov/vuln/detail/CVE-2023-3268
• https://lore.kernel.org/lkml/1682238502-1892-1-git-send-email-yangpc@wangsu.com/T/
• https://access.redhat.com/security/cve/CVE-2023-3390
• https://www.cve.org/CVERecord?id=CVE-2023-3390
• https://nvd.nist.gov/vuln/detail/CVE-2023-3390
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97
• https://access.redhat.com/security/cve/CVE-2023-3609
• https://www.cve.org/CVERecord?id=CVE-2023-3609
• https://nvd.nist.gov/vuln/detail/CVE-2023-3609
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04c55383fa5689357bcdd2c8036725a55ed632bc
• https://access.redhat.com/security/cve/CVE-2023-4459
• https://www.cve.org/CVERecord?id=CVE-2023-4459
• https://nvd.nist.gov/vuln/detail/CVE-2023-4459
• https://github.com/torvalds/linux/commit/edf410cb74dc612fd47ef5be319c5a0bcd6e6ccd
• https://access.redhat.com/security/cve/CVE-2023-4622
• https://www.cve.org/CVERecord?id=CVE-2023-4622
• https://nvd.nist.gov/vuln/detail/CVE-2023-4622
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.1.y&id=790c2f9d15b594350ae9bca7b236f2b1859de02c
• https://access.redhat.com/security/cve/CVE-2023-5717
• https://www.cve.org/CVERecord?id=CVE-2023-5717
• https://nvd.nist.gov/vuln/detail/CVE-2023-5717
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/kernel/events?id=32671e3799ca2e4590773fd0e63aaa4229e50c06
• https://access.redhat.com/security/cve/CVE-2023-6546
• https://www.cve.org/CVERecord?id=CVE-2023-6546
• https://nvd.nist.gov/vuln/detail/CVE-2023-6546
• https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e3
• https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527
• https://access.redhat.com/security/cve/CVE-2023-6932
• https://www.cve.org/CVERecord?id=CVE-2023-6932
• https://nvd.nist.gov/vuln/detail/CVE-2023-6932
• https://access.redhat.com/security/cve/CVE-2023-7192
• https://www.cve.org/CVERecord?id=CVE-2023-7192
• https://nvd.nist.gov/vuln/detail/CVE-2023-7192
• https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=ac4893980bbe79ce383daf9a0885666a30fe4c83
• https://access.redhat.com/security/cve/CVE-2023-38409
• https://www.cve.org/CVERecord?id=CVE-2023-38409
• https://nvd.nist.gov/vuln/detail/CVE-2023-38409
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=fffb0b52d5258554c645c966c6cbef7de50b851d
• https://access.redhat.com/security/cve/CVE-2023-40283
• https://www.cve.org/CVERecord?id=CVE-2023-40283
• https://nvd.nist.gov/vuln/detail/CVE-2023-40283
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1728137b33c00d5a2b5110ed7aafb42e7c32e4a1
• https://access.redhat.com/security/cve/CVE-2024-0646
• https://www.cve.org/CVERecord?id=CVE-2024-0646
• https://nvd.nist.gov/vuln/detail/CVE-2024-0646
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267
• https://access.redhat.com/security/cve/CVE-2024-26602
• https://www.cve.org/CVERecord?id=CVE-2024-26602
• https://nvd.nist.gov/vuln/detail/CVE-2024-26602
• https://github.com/torvalds/linux/commit/944d5fe50f3f03daacfea16300e656a1691c4a23
• https://lore.kernel.org/linux-cve-announce/2024022414-CVE-2024-26602-5e76@gregkh/