RHSA-2024:1881MediumCVSS 6.7

Red Hat Security Advisory: kernel security and bug fix update

Published
April 18, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (5)

CVE-2024-26586 →CVE-2024-35890 →CVE-2023-6240 →CVE-2024-26582 →CVE-2024-26584 →

📋 Description

CVE-2023-6240 — kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation CVE-2024-26582 — kernel: tls: use-after-free with partial reads and async decrypt CVE-2024-26584 — kernel: tls: handle backlogging of crypto requests CVE-2024-26586 — kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption CVE-2024-35890 — kernel: gro: fix ownership transfer

🎯 Affected products200

  • Red Hat CodeReady Linux Builder EUS (v.9.2)
  • Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-0:7.0.0-284.62.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-0:7.0.0-284.62.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-0:7.0.0-284.62.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-0:7.0.0-284.62.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.62.1.el9_2.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.62.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.62.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.62.1.el9_2.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.62.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.62.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.62.1.el9_2.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.62.1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.62.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.62.1.el9_2.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.62.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.62.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-0:5.14.0-284.62.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-0:5.14.0-284.62.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-0:5.14.0-284.62.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-0:5.14.0-284.62.1.el9_2.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-0:5.14.0-284.62.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-64k-0:5.14.0-284.62.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-64k-core-0:5.14.0-284.62.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-64k-debug-0:5.14.0-284.62.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-64k-debug-core-0:5.14.0-284.62.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-64k-debug-debuginfo-0:5.14.0-284.62.1.el9_2.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)
  • kernel-64k-debug-debuginfo-0:5.14.0-284.62.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: No current mitigation is available for this vulnerability. Please make sure to have kernel up-to-date as soon as the patches are available to make sure the flaw mitigated. Workaround: To mitigate this issue, prevent the mlxsw_spectrum module from being loaded. Please see https://access.redhat.com/solutions/41278 for information on blacklisting a kernel module to prevent it from loading automatically.

🔗 References (7)