Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399) * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564) * kernel: bpf: Fix a kernel verifier crash in stacksafe() (CVE-2024-45020) * kernel: nfsd: ensure that nfsd4_fattr_args.context is zeroed out (CVE-2024-46697) * kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CVE-2024-47675) * kernel: bpf: Fix a sdiv overflow issue (CVE-2024-49888) * kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099) * kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110) * kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125) * kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout (CVE-2024-50124) * kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (CVE-2024-50115) * kernel: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (CVE-2024-50142) * kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister (CVE-2024-50148) * kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192) * kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CVE-2024-50255) * kernel: sched/numa: Fix the potential null pointer dereference in task_numa_work() (CVE-2024-50223) * kernel: bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399) * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564) * kernel: bpf: Fix a kernel verifier crash in stacksafe() (CVE-2024-45020) * kernel: nfsd: ensure that nfsd4_fattr_args.context is zeroed out (CVE-2024-46697) * kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CVE-2024-47675) * kernel: bpf: Fix a sdiv overflow issue (CVE-2024-49888) * kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099) * kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110) * kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125) * kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout (CVE-2024-50124) * kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (CVE-2024-50115) * kernel: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (CVE-2024-50142) * kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister (CVE-2024-50148) * kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192) * kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CVE-2024-50255) * kernel: sched/numa: Fix the potential null pointer dereference in task_numa_work() (CVE-2024-50223) * kernel: bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
05 / REFERENCES
Further evidence
- https://access.redhat.com/errata/RHSA-2024:11486
- https://access.redhat.com/security/cve/CVE-2024-27399
- https://access.redhat.com/security/cve/CVE-2024-38564
- https://access.redhat.com/security/cve/CVE-2024-45020
- https://access.redhat.com/security/cve/CVE-2024-46697
- https://access.redhat.com/security/cve/CVE-2024-47675
- https://access.redhat.com/security/cve/CVE-2024-49888
- https://access.redhat.com/security/cve/CVE-2024-50099
- https://access.redhat.com/security/cve/CVE-2024-50110
- https://access.redhat.com/security/cve/CVE-2024-50115
- https://access.redhat.com/security/cve/CVE-2024-50124
- https://access.redhat.com/security/cve/CVE-2024-50125
- https://access.redhat.com/security/cve/CVE-2024-50142
- https://access.redhat.com/security/cve/CVE-2024-50148
- https://access.redhat.com/security/cve/CVE-2024-50192
- https://access.redhat.com/security/cve/CVE-2024-50223
- https://access.redhat.com/security/cve/CVE-2024-50255
- https://access.redhat.com/security/cve/CVE-2024-50262
- https://bugzilla.redhat.com/2280462
- https://bugzilla.redhat.com/2293429
- https://bugzilla.redhat.com/2311717
- https://bugzilla.redhat.com/2312085
- https://bugzilla.redhat.com/2320254
- https://bugzilla.redhat.com/2320517
- https://bugzilla.redhat.com/2323904
- https://bugzilla.redhat.com/2323930
- https://bugzilla.redhat.com/2323937
- https://bugzilla.redhat.com/2323944
- https://bugzilla.redhat.com/2323955
- https://bugzilla.redhat.com/2324315
- https://bugzilla.redhat.com/2324332
- https://bugzilla.redhat.com/2324612
- https://bugzilla.redhat.com/2324867
- https://bugzilla.redhat.com/2324868
- https://bugzilla.redhat.com/2324892
- https://errata.almalinux.org/9/ALSA-2024-11486.html