FlawAtlas
Search the atlas
ALSA-2024:4349 Not scored

Moderate: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (CVE-2023-52626) * kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset (CVE-2024-26801) * kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974) * kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393) * kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667) * kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870) * kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960) * kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400) Bug Fix(es): * cifs - kernel panic with cifs_put_smb_ses (JIRA:AlmaLinux-28943) * BUG: unable to handle page fault for address: ff16bf752f593ff8 [almalinux-9.4.z] (JIRA:AlmaLinux-35672) * [HPE 9.4 Bug] Request merge of AMD address translation library patch series [almalinux-9.4.z] (JIRA:AlmaLinux-36220) * [AlmaLinux9] kernel BUG at lib/list_debug.c:51! [almalinux-9.4.z] (JIRA:AlmaLinux-36687) * ice: DPLL-related fixes [almalinux-9.4.z] (JIRA:AlmaLinux-36716) * CNB95: net/sched: update TC core to upstream v6.8 [almalinux-9.4.z] (JIRA:AlmaLinux-37641) * IPv6: SR: backport fixes from upstream [almalinux-9.4.z] (JIRA:AlmaLinux-37669) * [RFE] Backport tmpfs noswap mount option [almalinux-9.4.z] (JIRA:AlmaLinux-38252) * Isolated cores causing issues on latest AlmaLinux9.4 kernel and not functioning as desired. [almalinux-9.4.z] (JIRA:AlmaLinux-38595) * [ice] Add automatic VF reset on Tx MDD events [almalinux-9.4.z] (JIRA:AlmaLinux-39083) * [HPEMC AlmaLinux 9.4 REGRESSION] turbostat: turbostat broken on 10+ sockets. [almalinux-9.4.z] (JIRA:AlmaLinux-34953) * bnx2x: fix crashes in PCI error handling, resource leaks [almalinux-9.4.z] (JIRA:AlmaLinux-43272) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Exploit probability Not scored
Published July 8, 2024
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

AlmaLinux:9 kernel-64k-debug-devel
AlmaLinux:9 kernel-debug-modules-core
AlmaLinux:9 kernel-headers
AlmaLinux:9 kernel-rt-modules-extra
AlmaLinux:9 kernel-rt-debug-devel
AlmaLinux:9 kernel-64k-modules-core
AlmaLinux:9 kernel-debug-modules-extra
AlmaLinux:9 python3-perf
AlmaLinux:9 kernel-debug-devel
AlmaLinux:9 kernel-rt-debug-modules-extra
AlmaLinux:9 kernel-core
AlmaLinux:9 kernel-64k-debug-modules-core
AlmaLinux:9 kernel-devel
AlmaLinux:9 kernel-64k-debug
AlmaLinux:9 kernel-zfcpdump-devel-matched
AlmaLinux:9 kernel-cross-headers
AlmaLinux:9 kernel-doc
AlmaLinux:9 kernel-abi-stablelists
AlmaLinux:9 rtla
AlmaLinux:9 kernel-zfcpdump-modules-extra
AlmaLinux:9 kernel-rt-devel
AlmaLinux:9 kernel-tools
AlmaLinux:9 kernel-rt-debug-core
AlmaLinux:9 kernel-modules-core
AlmaLinux:9 kernel-64k-debug-core
AlmaLinux:9 kernel-64k-debug-modules-extra
AlmaLinux:9 kernel-debug-uki-virt
AlmaLinux:9 kernel-modules-extra
AlmaLinux:9 kernel-zfcpdump-modules-core
AlmaLinux:9 kernel-zfcpdump-devel
AlmaLinux:9 kernel-modules
AlmaLinux:9 kernel-rt-debug-modules-core
AlmaLinux:9 kernel-debug-modules
AlmaLinux:9 kernel-debug
AlmaLinux:9 kernel-debug-core
AlmaLinux:9 kernel-rt-core
AlmaLinux:9 kernel-debug-devel-matched
AlmaLinux:9 kernel-64k-devel
AlmaLinux:9 kernel-tools-libs-devel
AlmaLinux:9 kernel-rt-debug
AlmaLinux:9 kernel-64k-devel-matched
AlmaLinux:9 kernel-zfcpdump
AlmaLinux:9 perf
AlmaLinux:9 kernel-rt-debug-modules
AlmaLinux:9 kernel-devel-matched
AlmaLinux:9 kernel-rt-modules
AlmaLinux:9 kernel
AlmaLinux:9 libperf
AlmaLinux:9 kernel-rt
AlmaLinux:9 kernel-64k-modules-extra
AlmaLinux:9 kernel-uki-virt
AlmaLinux:9 kernel-64k-debug-devel-matched
AlmaLinux:9 bpftool
AlmaLinux:9 kernel-zfcpdump-core
AlmaLinux:9 kernel-zfcpdump-modules
AlmaLinux:9 rv
AlmaLinux:9 kernel-rt-modules-core
AlmaLinux:9 kernel-tools-libs
AlmaLinux:9 kernel-64k-debug-modules
AlmaLinux:9 kernel-64k-modules
AlmaLinux:9 kernel-64k-core
AlmaLinux:9 kernel-64k

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities ALSA-2024:4349

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (CVE-2023-52626) * kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset (CVE-2024-26801) * kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974) * kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393) * kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667) * kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870) * kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960) * kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400) Bug Fix(es): * cifs - kernel panic with cifs_put_smb_ses (JIRA:AlmaLinux-28943) * BUG: unable to handle page fault for address: ff16bf752f593ff8 [almalinux-9.4.z] (JIRA:AlmaLinux-35672) * [HPE 9.4 Bug] Request merge of AMD address translation library patch series [almalinux-9.4.z] (JIRA:AlmaLinux-36220) * [AlmaLinux9] kernel BUG at lib/list_debug.c:51! [almalinux-9.4.z] (JIRA:AlmaLinux-36687) * ice: DPLL-related fixes [almalinux-9.4.z] (JIRA:AlmaLinux-36716) * CNB95: net/sched: update TC core to upstream v6.8 [almalinux-9.4.z] (JIRA:AlmaLinux-37641) * IPv6: SR: backport fixes from upstream [almalinux-9.4.z] (JIRA:AlmaLinux-37669) * [RFE] Backport tmpfs noswap mount option [almalinux-9.4.z] (JIRA:AlmaLinux-38252) * Isolated cores causing issues on latest AlmaLinux9.4 kernel and not functioning as desired. [almalinux-9.4.z] (JIRA:AlmaLinux-38595) * [ice] Add automatic VF reset on Tx MDD events [almalinux-9.4.z] (JIRA:AlmaLinux-39083) * [HPEMC AlmaLinux 9.4 REGRESSION] turbostat: turbostat broken on 10+ sockets. [almalinux-9.4.z] (JIRA:AlmaLinux-34953) * bnx2x: fix crashes in PCI error handling, resource leaks [almalinux-9.4.z] (JIRA:AlmaLinux-43272) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

View original source

05 / REFERENCES

Further evidence