Issued:
2024-08-08
Updated:
2024-08-08

RHSA-2024:5101 - Important: kernel security update

Synopsis

Important: kernel security update

Type/Severity

Security Advisory Important

Topic

An update for kernel is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)

  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)

  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)

  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)

  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)

  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)

  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)

  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)

  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)

  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)

  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)

  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)

  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)

  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)

  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)

  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)

  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)

  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)

  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)

  • (CVE-2023-28746)

  • (CVE-2023-52847)

  • (CVE-2021-47548)

  • (CVE-2024-36921)

  • (CVE-2024-26921)

  • (CVE-2021-47579)

  • (CVE-2024-36927)

  • (CVE-2024-39276)

  • (CVE-2024-33621)

  • (CVE-2024-27010)

  • (CVE-2024-26960)

  • (CVE-2024-38596)

  • (CVE-2022-48743)

  • (CVE-2024-26733)

  • (CVE-2024-26586)

  • (CVE-2024-26698)

  • (CVE-2023-52619)

Bug Fix(es):

  • RHEL8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:RHEL-17678)

  • [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:RHEL-23841)

  • [rhel8] gfs2: Fix glock shrinker (JIRA:RHEL-32941)

  • lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:RHEL-33437)

  • [Hyper-V][RHEL-8.10.z] Update hv_netvsc driver to TOT (JIRA:RHEL-39074)

  • Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:RHEL-40167)

  • blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:RHEL-40939)

  • (JIRA:RHEL-31798)

  • (JIRA:RHEL-10263)

  • (JIRA:RHEL-40901)

  • (JIRA:RHEL-43547)

  • (JIRA:RHEL-34876)

Enhancement(s):

  • [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:RHEL-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

ProductVersionArch
Red Hat Enterprise Linux for x86_648x86_64
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle8.10x86_64
Red Hat Enterprise Linux for Power, little endian8ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle8.10ppc64le
Red Hat Enterprise Linux for IBM z Systems8s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle8.10s390x
Red Hat Enterprise Linux for ARM 648aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle8.10aarch64
Red Hat CodeReady Linux Builder for x86_648x86_64
Red Hat CodeReady Linux Builder for Power, little endian8ppc64le
Red Hat CodeReady Linux Builder for ARM 648aarch64

Updated Packages

  • kernel-cross-headers-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-zfcpdump-core-4.18.0-553.16.1.el8_10.s390x.rpm
  • perf-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-debug-debuginfo-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-debug-core-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-debug-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-tools-libs-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-tools-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-4.18.0-553.16.1.el8_10.s390x.rpm
  • perf-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-4.18.0-553.16.1.el8_10.src.rpm
  • kernel-debuginfo-common-aarch64-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-tools-libs-devel-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-tools-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • perf-debuginfo-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-zfcpdump-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-modules-4.18.0-553.16.1.el8_10.s390x.rpm
  • python3-perf-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-zfcpdump-modules-extra-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-core-4.18.0-553.16.1.el8_10.aarch64.rpm
  • bpftool-debuginfo-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-debug-modules-extra-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-modules-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-debuginfo-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-core-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-core-4.18.0-553.16.1.el8_10.s390x.rpm
  • bpftool-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-modules-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-tools-libs-devel-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-tools-libs-4.18.0-553.16.1.el8_10.x86_64.rpm
  • bpftool-debuginfo-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-debug-debuginfo-4.18.0-553.16.1.el8_10.s390x.rpm
  • bpftool-debuginfo-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-debuginfo-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-cross-headers-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-debug-devel-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • perf-debuginfo-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-debug-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-modules-extra-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-tools-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-tools-4.18.0-553.16.1.el8_10.aarch64.rpm
  • python3-perf-debuginfo-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-debug-modules-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-debug-modules-extra-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-modules-extra-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-tools-libs-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-debug-core-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-tools-debuginfo-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-headers-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-devel-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-debug-debuginfo-4.18.0-553.16.1.el8_10.x86_64.rpm
  • bpftool-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-debug-devel-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-tools-libs-devel-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-debuginfo-common-s390x-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-devel-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-debuginfo-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-tools-debuginfo-4.18.0-553.16.1.el8_10.s390x.rpm
  • bpftool-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-core-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-debug-devel-4.18.0-553.16.1.el8_10.aarch64.rpm
  • perf-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-tools-debuginfo-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-debuginfo-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-4.18.0-553.16.1.el8_10.x86_64.rpm
  • python3-perf-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-zfcpdump-debuginfo-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-devel-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-cross-headers-4.18.0-553.16.1.el8_10.aarch64.rpm
  • python3-perf-debuginfo-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-debug-debuginfo-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-headers-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-debug-modules-extra-4.18.0-553.16.1.el8_10.x86_64.rpm
  • perf-debuginfo-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-debug-modules-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-modules-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-zfcpdump-devel-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-debuginfo-common-ppc64le-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-debug-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-debug-modules-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-modules-extra-4.18.0-553.16.1.el8_10.aarch64.rpm
  • kernel-abi-stablelists-4.18.0-553.16.1.el8_10.noarch.rpm
  • kernel-tools-debuginfo-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-modules-extra-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-debug-core-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-debug-core-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-debug-modules-4.18.0-553.16.1.el8_10.s390x.rpm
  • bpftool-4.18.0-553.16.1.el8_10.x86_64.rpm
  • python3-perf-debuginfo-4.18.0-553.16.1.el8_10.aarch64.rpm
  • python3-perf-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-headers-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • bpftool-debuginfo-4.18.0-553.16.1.el8_10.x86_64.rpm
  • python3-perf-debuginfo-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-debug-modules-extra-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-headers-4.18.0-553.16.1.el8_10.s390x.rpm
  • perf-debuginfo-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-debuginfo-common-x86_64-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-debug-4.18.0-553.16.1.el8_10.aarch64.rpm
  • perf-4.18.0-553.16.1.el8_10.x86_64.rpm
  • kernel-debug-devel-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-cross-headers-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • python3-perf-4.18.0-553.16.1.el8_10.ppc64le.rpm
  • kernel-doc-4.18.0-553.16.1.el8_10.noarch.rpm
  • kernel-zfcpdump-modules-4.18.0-553.16.1.el8_10.s390x.rpm
  • kernel-devel-4.18.0-553.16.1.el8_10.aarch64.rpm

Fixes

CVEs

References

Additional information