RHSA-2024:4533HighCVSS 7.3

Red Hat Security Advisory: kernel security update

Published
July 15, 2024
Last Modified
August 5, 2026

🔗 CVE IDs covered (16)

CVE-2024-35969 →CVE-2023-52638 →CVE-2024-26801 →CVE-2024-26852 →CVE-2024-36016 →CVE-2024-36005 →CVE-2024-26720 · pendingCVE-2024-35857 →CVE-2024-36886 →CVE-2024-26583 →CVE-2024-26585 →CVE-2021-47548 →CVE-2021-47596 →CVE-2022-48627 →CVE-2024-26783 →CVE-2024-35898 →

📋 Description

CVE-2021-47548 — kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() CVE-2021-47596 — kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg CVE-2022-48627 — kernel: vt: fix memory overlapping when deleting chars in the buffer CVE-2023-52638 — kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock CVE-2024-26583 — kernel: tls: race between async notify and socket close CVE-2024-26585 — kernel: tls: race between tx work scheduling and socket close CVE-2024-26720 — kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again CVE-2024-26783 — kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index CVE-2024-26801 — kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset CVE-2024-26852 — kernel: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() CVE-2024-35857 — kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() CVE-2024-35898 — kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() CVE-2024-35969 — kernel: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr CVE-2024-36005 — kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path CVE-2024-36016 — kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() CVE-2024-36886 — kernel: TIPC message reassembly use-after-free remote code execution vulnerability

🎯 Affected products200

  • Red Hat CodeReady Linux Builder EUS (v.9.2)
  • Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-0:7.0.0-284.73.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-0:7.0.0-284.73.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-0:7.0.0-284.73.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-0:7.0.0-284.73.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.73.1.el9_2.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.73.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.73.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.73.1.el9_2.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.73.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.73.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.73.1.el9_2.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.73.1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.73.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.73.1.el9_2.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.73.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.73.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-0:5.14.0-284.73.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-0:5.14.0-284.73.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-0:5.14.0-284.73.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-0:5.14.0-284.73.1.el9_2.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-0:5.14.0-284.73.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-64k-0:5.14.0-284.73.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-64k-core-0:5.14.0-284.73.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-64k-debug-0:5.14.0-284.73.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-64k-debug-core-0:5.14.0-284.73.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)
  • kernel-64k-debug-debuginfo-0:5.14.0-284.73.1.el9_2.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)
  • kernel-64k-debug-debuginfo-0:5.14.0-284.73.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible. Workaround: No current mitigation is available for this vulnerability. Please make sure to have kernel up-to-date as soon as the patches are available to make sure the flaw mitigated. Workaround: The TIPC module is not automatically loaded in default configurations. When required, administrative privileges are required to explicitly load this module. To determine if the TIPC module is loaded, use the following command: # grep tipc /proc/modules Look for output similar to the following: tipc 479232 0 - Live 0xffffffffc1ba5000 ip6_udp_tunnel 16384 1 tipc, Live 0xffffffffc1b9b000 udp_tunnel 32768 1 tipc, Live 0xffffffffc1b8b000 Loading the module can be prevented with the following instructions: # echo "install tipc /bin/true" >> /etc/modprobe.d/disable-tipc.conf The system will need to be restarted if the module is loaded. In most circumstances, the TIPC kernel module will be unable to be unloaded while any network interfaces are active and the protocol is in use. If the system requires this module to work correctly, this mitigation may not be suitable.

🔗 References (19)