RHSA-2024:1882HighCVSS 6.7

Red Hat Security Advisory: kernel-rt security and bug fix update

Published
April 18, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (4)

CVE-2024-26584 →CVE-2024-26586 →CVE-2023-6240 →CVE-2024-26582 →

📋 Description

CVE-2023-6240 — kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation CVE-2024-26582 — kernel: tls: use-after-free with partial reads and async decrypt CVE-2024-26584 — kernel: tls: handle backlogging of crypto requests CVE-2024-26586 — kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption

🎯 Affected products36

  • Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-0:5.14.0-284.62.1.rt14.347.el9_2.src as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-0:5.14.0-284.62.1.rt14.347.el9_2.src as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-core-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-core-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-debug-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-debug-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-debug-core-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-debug-core-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-debug-debuginfo-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-debug-debuginfo-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-debug-devel-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-debug-devel-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-debug-kvm-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-debug-modules-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-debug-modules-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-debug-modules-core-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-debug-modules-core-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-debug-modules-extra-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-debug-modules-extra-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-debuginfo-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-debuginfo-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-debuginfo-common-x86_64-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-debuginfo-common-x86_64-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-devel-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
  • kernel-rt-devel-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • kernel-rt-kvm-0:5.14.0-284.62.1.rt14.347.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
  • +6 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: No current mitigation is available for this vulnerability. Please make sure to have kernel up-to-date as soon as the patches are available to make sure the flaw mitigated. Workaround: To mitigate this issue, prevent the mlxsw_spectrum module from being loaded. Please see https://access.redhat.com/solutions/41278 for information on blacklisting a kernel module to prevent it from loading automatically.

🔗 References (7)