RHSA-2024:1533MediumCVSS 6.8
Red Hat Security Advisory: kernel-rt security and bug fix update
🔗 CVE IDs covered (2)
📋 Description
CVE-2024-0565 — kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client CVE-2024-26602 — kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier
🎯 Affected products36
- Red Hat Enterprise Linux Real Time EUS (v.9.2)
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-0:5.14.0-284.59.1.rt14.344.el9_2.src as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-0:5.14.0-284.59.1.rt14.344.el9_2.src as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-core-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-core-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-debug-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-debug-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-debug-core-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-debug-core-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-debug-debuginfo-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-debug-debuginfo-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-debug-devel-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-debug-devel-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-debug-kvm-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-debug-modules-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-debug-modules-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-debug-modules-core-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-debug-modules-core-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-debug-modules-extra-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-debug-modules-extra-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-debuginfo-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-debuginfo-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-debuginfo-common-x86_64-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-debuginfo-common-x86_64-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-devel-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
- kernel-rt-devel-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- kernel-rt-kvm-0:5.14.0-284.59.1.rt14.344.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
- +6 more not shown
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this issue, prevent module cifs from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2024:1533
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2258518
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2267695
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1533.json