Issued:: 2024-07-02
Updated:: 2024-07-08

RHSA-2024:4211 - Important: kernel security and bug fix update

Synopsis

Important: kernel security and bug fix update

Type/Severity

Security Advisory Important

Topic

An update for kernel is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

[Updated 03 July 2024]

The text of this advisory has been updated with the correct product name (Red Hat Enterprise Linux 8) in the Topics section. In the Problem Description section, CVEs of the same sub-components have been grouped together. The packages included in this revised update have not been changed in any way from the packages included in the original advisory.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)
kernel: ovl: fix leaked entry (CVE-2021-46972)
kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
kernel: gro: fix ownership transfer (CVE-2024-35890)
kernel: tls: (CVE-2024-26584, CVE-2024-26583, CVE-2024-26585)
kernel: wifi: (CVE-2024-35789, CVE-2024-27410, CVE-2024-35838, CVE-2024-35845)
kernel: mlxsw: (CVE-2024-35855, CVE-2024-35854, CVE-2024-35853, CVE-2024-35852, CVE-2024-36007)
kernel: PCI interrupt mapping cause oops [rhel-8] (CVE-2021-46909)
kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)
kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng [rhel-8] (CVE-2023-52615)
kernel: net/mlx5e: (CVE-2023-52626, CVE-2024-35835, CVE-2023-52667, CVE-2024-35959)
kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)
kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset [rhel-8] (CVE-2024-26801)
kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
kernel: netfilter: nf_tables: use timestamp to check for set element timeout [rhel-8.10] (CVE-2024-27397)
kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
kernel: x86/mm/swap: (CVE-2024-26759, CVE-2024-26906)
kernel: tipc: fix kernel warning when sending SYN message [rhel-8] (CVE-2023-52700)
kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)
kernel: powerpc/imc-pmu/powernv: (CVE-2023-52675, CVE-2023-52686)
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
kernel: crypto: (CVE-2024-26974, CVE-2023-52669, CVE-2023-52813)
kernel: net/mlx5/bnx2x/usb: (CVE-2024-35960, CVE-2024-35958, CVE-2021-47310, CVE-2024-26804, CVE-2021-47311, CVE-2024-26859, CVE-2021-47236, CVE-2023-52703)
kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)
kernel: USB/usbnet: (CVE-2023-52781, CVE-2023-52877, CVE-2021-47495)
kernel: can: (CVE-2023-52878, CVE-2021-47456)
kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:RHEL-29783)
Temporary values in FIPS integrity test should be zeroized [rhel-8.10.z] (JIRA:RHEL-35361)
RHEL8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:RHEL-36048)
[RHEL8] blktests block/024 failed (JIRA:RHEL-8130)
RHEL8.9: EEH injections results Error: Power fault on Port 0 and other call traces(Everest/1050/Shiner) (JIRA:RHEL-14195)
Latency spikes with Matrox G200 graphic cards (JIRA:RHEL-36172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

Product	Version	Arch
Red Hat Enterprise Linux for x86_64	8	x86_64
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle	8.10	x86_64
Red Hat Enterprise Linux for Power, little endian	8	ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle	8.10	ppc64le
Red Hat Enterprise Linux for IBM z Systems	8	s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle	8.10	s390x
Red Hat Enterprise Linux for ARM 64	8	aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle	8.10	aarch64
Red Hat CodeReady Linux Builder for x86_64	8	x86_64
Red Hat CodeReady Linux Builder for Power, little endian	8	ppc64le
Red Hat CodeReady Linux Builder for ARM 64	8	aarch64

Updated Packages

kernel-cross-headers-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-debug-devel-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-debug-modules-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-debug-core-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-devel-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-tools-debuginfo-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-tools-debuginfo-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-debuginfo-4.18.0-553.8.1.el8_10.x86_64.rpm
bpftool-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-modules-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-tools-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-tools-libs-4.18.0-553.8.1.el8_10.aarch64.rpm
bpftool-debuginfo-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-debug-modules-extra-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-debuginfo-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-headers-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-headers-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-tools-debuginfo-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-tools-libs-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-zfcpdump-core-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-zfcpdump-modules-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-debug-debuginfo-4.18.0-553.8.1.el8_10.x86_64.rpm
perf-debuginfo-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-core-4.18.0-553.8.1.el8_10.s390x.rpm
bpftool-4.18.0-553.8.1.el8_10.s390x.rpm
bpftool-4.18.0-553.8.1.el8_10.aarch64.rpm
perf-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-zfcpdump-devel-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-debug-debuginfo-4.18.0-553.8.1.el8_10.s390x.rpm
perf-debuginfo-4.18.0-553.8.1.el8_10.s390x.rpm
bpftool-debuginfo-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-debuginfo-common-x86_64-4.18.0-553.8.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-debug-modules-4.18.0-553.8.1.el8_10.x86_64.rpm
python3-perf-debuginfo-4.18.0-553.8.1.el8_10.aarch64.rpm
python3-perf-debuginfo-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-debug-modules-extra-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-tools-libs-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-debug-modules-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-debuginfo-common-aarch64-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-modules-extra-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-zfcpdump-debuginfo-4.18.0-553.8.1.el8_10.s390x.rpm
python3-perf-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.8.1.el8_10.aarch64.rpm
python3-perf-debuginfo-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-core-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.8.1.el8_10.s390x.rpm
perf-debuginfo-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-devel-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-debuginfo-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-debuginfo-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-core-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-modules-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-debuginfo-common-ppc64le-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-debug-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-debug-devel-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-modules-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-4.18.0-553.8.1.el8_10.src.rpm
bpftool-debuginfo-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-tools-libs-devel-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-tools-libs-devel-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-tools-libs-devel-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.8.1.el8_10.s390x.rpm
perf-4.18.0-553.8.1.el8_10.ppc64le.rpm
perf-4.18.0-553.8.1.el8_10.x86_64.rpm
bpftool-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-debug-debuginfo-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-debug-modules-extra-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-headers-4.18.0-553.8.1.el8_10.aarch64.rpm
python3-perf-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-modules-extra-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-4.18.0-553.8.1.el8_10.ppc64le.rpm
perf-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-cross-headers-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-debug-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-headers-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-debug-debuginfo-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-devel-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-modules-extra-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-zfcpdump-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-debug-core-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-zfcpdump-modules-extra-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-debug-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-doc-4.18.0-553.8.1.el8_10.noarch.rpm
python3-perf-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-core-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-debuginfo-common-s390x-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-tools-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-devel-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-debug-core-4.18.0-553.8.1.el8_10.s390x.rpm
bpftool-debuginfo-4.18.0-553.8.1.el8_10.ppc64le.rpm
perf-debuginfo-4.18.0-553.8.1.el8_10.x86_64.rpm
python3-perf-debuginfo-4.18.0-553.8.1.el8_10.x86_64.rpm
kernel-tools-debuginfo-4.18.0-553.8.1.el8_10.s390x.rpm
kernel-modules-4.18.0-553.8.1.el8_10.ppc64le.rpm
kernel-cross-headers-4.18.0-553.8.1.el8_10.aarch64.rpm
kernel-abi-stablelists-4.18.0-553.8.1.el8_10.noarch.rpm
kernel-debug-core-4.18.0-553.8.1.el8_10.aarch64.rpm

Fixes

CVEs

CVE-2020-26555
CVE-2021-46909
CVE-2021-46972
CVE-2021-47069
CVE-2021-47073
CVE-2021-47236
CVE-2021-47310
CVE-2021-47311
CVE-2021-47353
CVE-2021-47356
CVE-2021-47456
CVE-2021-47495
CVE-2022-49057
CVE-2023-5090
CVE-2023-52464
CVE-2023-52560
CVE-2023-52615
CVE-2023-52626
CVE-2023-52667
CVE-2023-52669
CVE-2023-52675
CVE-2023-52686
CVE-2023-52700
CVE-2023-52703
CVE-2023-52781
CVE-2023-52813
CVE-2023-52835
CVE-2023-52877
CVE-2023-52878
CVE-2023-52881
CVE-2024-26583
CVE-2024-26584
CVE-2024-26585
CVE-2024-26656
CVE-2024-26675
CVE-2024-26735
CVE-2024-26759
CVE-2024-26801
CVE-2024-26804
CVE-2024-26826
CVE-2024-26859
CVE-2024-26906
CVE-2024-26907
CVE-2024-26974
CVE-2024-26982
CVE-2024-27397
CVE-2024-27410
CVE-2024-35789
CVE-2024-35835
CVE-2024-35838
CVE-2024-35845
CVE-2024-35852
CVE-2024-35853
CVE-2024-35854
CVE-2024-35855
CVE-2024-35888
CVE-2024-35890
CVE-2024-35958
CVE-2024-35959
CVE-2024-35960
CVE-2024-36004
CVE-2024-36007
CVE-2024-42159

References

https://access.redhat.com/security/updates/classification/#important

Additional information

The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.