Red Hat Security Advisory: kernel security update
🔗 CVE IDs covered (18)
📋 Description
CVE-2021-47459 — kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv CVE-2022-48743 — kernel: net: amd-xgbe: Fix skb data length underflow CVE-2023-52458 — kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned CVE-2023-52809 — kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() CVE-2024-26737 — kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel CVE-2024-26773 — kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() CVE-2024-26852 — kernel: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() CVE-2024-26880 — kernel: dm: call the resume method on internal suspend CVE-2024-26982 — kernel: Squashfs: check the inode number is not the invalid value of zero CVE-2024-27030 — kernel: octeontx2-af: race condition on interupts CVE-2024-27046 — kernel: nfp: flower: handle acti_netdevs allocation failure CVE-2024-35857 — kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() CVE-2024-35885 — kernel: mlxbf_gige: stop interface during shutdown CVE-2024-35907 — kernel: mlxbf_gige: call request_irq() after NAPI initialized CVE-2024-35952 — kernel: drm/ast: Fix soft lockup CVE-2024-36924 — kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() CVE-2024-36952 — kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up CVE-2024-38580 — kernel: epoll: be better about file lifetimes
🔗 References (20)
- selfhttps://access.redhat.com/errata/RHSA-2024:4928
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2265794
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2273236
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2273274
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2275690
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2275761
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278337
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278435
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278473
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2281247
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2281647
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2281700
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282669
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282898
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2284506
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2284598
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293316
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293412
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4928.json