# ELSA-2024-12780: Security update for 9 packages ELSA-2024-12780, released October 11, 2024, fixes 70 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2024-12780 - Platform: Linux - Released: Oct 11, 2024 - Priority: High (Closes CVE-2024-42284, high severity) - CVEs: 70, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2024-12780.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 8 | 0:5.4.17-2136.336.5.1.el8uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 8 | 0:5.4.17-2136.336.5.1.el8uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 8 | 0:5.4.17-2136.336.5.1.el8uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 8 | 0:5.4.17-2136.336.5.1.el8uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 8 | 0:5.4.17-2136.336.5.1.el8uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 8 | 0:5.4.17-2136.336.5.1.el7uek | | [kernel-uek-tools-libs](https://patchblox.com/security/data/product/linux/kernel-uek-tools-libs.md) | ol 8 | 0:5.4.17-2136.336.5.1.el7uek | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | ol 8 | 0:5.4.17-2136.336.5.1.el7uek | | [python-perf](https://patchblox.com/security/data/product/linux/python-perf.md) | ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-42284](https://patchblox.com/security/data/cve/CVE-2024-42284.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0092 | | | [CVE-2024-42285](https://patchblox.com/security/data/cve/CVE-2024-42285.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destr... | 7.8 | 0.0087 | | | [CVE-2024-43883](https://patchblox.com/security/data/cve/CVE-2024-43883.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new... | 7.1 | 0.0065 | | | [CVE-2024-41042](https://patchblox.com/security/data/cve/CVE-2024-41042.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0032 | | | [CVE-2024-42265](https://patchblox.com/security/data/cve/CVE-2024-42265.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0028 | | | [CVE-2024-46738](https://patchblox.com/security/data/cve/CVE-2024-46738.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource... | 7.8 | 0.0028 | | | [CVE-2024-41059](https://patchblox.com/security/data/cve/CVE-2024-41059.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot... | 7.1 | 0.0027 | | | [CVE-2024-27397](https://patchblox.com/security/data/cve/CVE-2024-27397.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0026 | | | [CVE-2024-43839](https://patchblox.com/security/data/cve/CVE-2024-43839.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bna_tcb and bna_c... | 7.8 | 0.0025 | | | [CVE-2024-42131](https://patchblox.com/security/data/cve/CVE-2024-42131.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 | | | [CVE-2024-43830](https://patchblox.com/security/data/cve/CVE-2024-43830.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 | | | [CVE-2024-42292](https://patchblox.com/security/data/cve/CVE-2024-42292.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0025 | | | [CVE-2024-42280](https://patchblox.com/security/data/cve/CVE-2024-42280.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix a use after free in hfcmulti_tx() Do... | 7.8 | 0.0024 | | | [CVE-2024-43882](https://patchblox.com/security/data/cve/CVE-2024-43882.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.0 | 0.0024 | | | [CVE-2024-41064](https://patchblox.com/security/data/cve/CVE-2024-41064.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0024 | | | [CVE-2024-43871](https://patchblox.com/security/data/cve/CVE-2024-43871.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0024 | | | [CVE-2024-43858](https://patchblox.com/security/data/cve/CVE-2024-43858.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: Fix array-index-out-of-bounds in diFree | 7.8 | 0.0024 | | | [CVE-2024-42271](https://patchblox.com/security/data/cve/CVE-2024-42271.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b... | 7.8 | 0.0024 | | | [CVE-2024-42301](https://patchblox.com/security/data/cve/CVE-2024-42301.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk F... | 7.8 | 0.0023 | | | [CVE-2024-41070](https://patchblox.com/security/data/cve/CVE-2024-41070.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tc... | 7.8 | 0.0023 | | | [CVE-2024-42313](https://patchblox.com/security/data/cve/CVE-2024-42313.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free in vdec_close... | 7.8 | 0.0023 | | | [CVE-2024-41012](https://patchblox.com/security/data/cve/CVE-2024-41012.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0023 | | | [CVE-2024-42305](https://patchblox.com/security/data/cve/CVE-2024-42305.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.1 | 0.0023 | | | [CVE-2024-41065](https://patchblox.com/security/data/cve/CVE-2024-41065.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 | | | [CVE-2024-42286](https://patchblox.com/security/data/cve/CVE-2024-42286.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: validate nvme_local_port correctl... | 5.5 | 0.0089 | | | [CVE-2024-41081](https://patchblox.com/security/data/cve/CVE-2024-41081.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in c... | 5.5 | 0.0087 | | | [CVE-2024-43856](https://patchblox.com/security/data/cve/CVE-2024-43856.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b... | 5.5 | 0.0042 | | | [CVE-2024-42287](https://patchblox.com/security/data/cve/CVE-2024-42287.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command early within loc... | 4.7 | 0.0034 | | | [CVE-2024-42311](https://patchblox.com/security/data/cve/CVE-2024-42311.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfs_inode_info... | 5.5 | 0.0028 | | | [CVE-2024-42259](https://patchblox.com/security/data/cve/CVE-2024-42259.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundar... | 5.5 | 0.0027 | | | [CVE-2024-43890](https://patchblox.com/security/data/cve/CVE-2024-43890.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in get_free_elt() "tracin... | 5.5 | 0.0026 | | | [CVE-2024-43893](https://patchblox.com/security/data/cve/CVE-2024-43893.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid di... | 5.5 | 0.0026 | | | [CVE-2024-41015](https://patchblox.com/security/data/cve/CVE-2024-41015.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0025 | | | [CVE-2024-41017](https://patchblox.com/security/data/cve/CVE-2024-41017.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0025 | | | [CVE-2024-42276](https://patchblox.com/security/data/cve/CVE-2024-42276.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b... | 5.5 | 0.0025 | | | [CVE-2024-42297](https://patchblox.com/security/data/cve/CVE-2024-42297.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to don't dirty inode for readonly file... | 5.5 | 0.0025 | | | [CVE-2024-42306](https://patchblox.com/security/data/cve/CVE-2024-42306.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: udf: Avoid using corrupted block bitmap buffer... | 5.5 | 0.0025 | | | [CVE-2024-42288](https://patchblox.com/security/data/cve/CVE-2024-42288.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix for possible memory corruptio... | 5.5 | 0.0024 | | | [CVE-2024-41068](https://patchblox.com/security/data/cve/CVE-2024-41068.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix sclp_init() cleanup on failure I... | 5.5 | 0.0024 | | | [CVE-2024-42283](https://patchblox.com/security/data/cve/CVE-2024-42283.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 5.5 | 0.0024 | | | [CVE-2024-42289](https://patchblox.com/security/data/cve/CVE-2024-42289.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: During vport delete send async lo... | 5.5 | 0.0024 | | | [CVE-2024-44948](https://patchblox.com/security/data/cve/CVE-2024-44948.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before savi... | 5.5 | 0.0024 | | | [CVE-2024-44944](https://patchblox.com/security/data/cve/CVE-2024-44944.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to cal... | 6.1 | 0.0024 | | | [CVE-2024-44960](https://patchblox.com/security/data/cve/CVE-2024-44960.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b... | 5.5 | 0.0024 | | | [CVE-2024-42281](https://patchblox.com/security/data/cve/CVE-2024-42281.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a segment issue when downgrading gso_si... | 5.5 | 0.0024 | | | [CVE-2024-43829](https://patchblox.com/security/data/cve/CVE-2024-43829.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/qxl: Add check for drm_cvt_mode Add check f... | 5.5 | 0.0024 | | | [CVE-2024-42295](https://patchblox.com/security/data/cve/CVE-2024-42295.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle inconsistent state in nilfs_btnod... | 5.5 | 0.0023 | | | [CVE-2024-42304](https://patchblox.com/security/data/cve/CVE-2024-42304.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0023 | | | [CVE-2024-41072](https://patchblox.com/security/data/cve/CVE-2024-41072.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data... | 5.5 | 0.0023 | | | [CVE-2024-42290](https://patchblox.com/security/data/cve/CVE-2024-42290.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: irqchip/imx-irqsteer: Handle runtime power manag... | 5.5 | 0.0023 | | | [CVE-2024-43846](https://patchblox.com/security/data/cve/CVE-2024-43846.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 6.1 | 0.0023 | | | [CVE-2024-43894](https://patchblox.com/security/data/cve/CVE-2024-43894.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/client: fix null pointer dereference in drm_... | 5.5 | 0.0023 | | | [CVE-2024-42309](https://patchblox.com/security/data/cve/CVE-2024-42309.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psb_... | 5.5 | 0.0023 | | | [CVE-2024-42310](https://patchblox.com/security/data/cve/CVE-2024-42310.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdv_... | 5.5 | 0.0023 | | | [CVE-2024-43861](https://patchblox.com/security/data/cve/CVE-2024-43861.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: fix memory leak for not ip p... | 5.5 | 0.0023 | | | [CVE-2024-43880](https://patchblox.com/security/data/cve/CVE-2024-43880.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0023 | | | [CVE-2024-43914](https://patchblox.com/security/data/cve/CVE-2024-43914.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0023 | | | [CVE-2024-44935](https://patchblox.com/security/data/cve/CVE-2024-44935.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 5.5 | 0.0023 | | | [CVE-2024-43860](https://patchblox.com/security/data/cve/CVE-2024-43860.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Skip over memory region w... | 5.5 | 0.0022 | | | [CVE-2024-44965](https://patchblox.com/security/data/cve/CVE-2024-44965.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b... | 5.5 | 0.0022 | | | [CVE-2024-44968](https://patchblox.com/security/data/cve/CVE-2024-44968.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Move per CPU pointer access into... | 5.5 | 0.0022 | | | [CVE-2024-44969](https://patchblox.com/security/data/cve/CVE-2024-44969.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O Whe... | 6.1 | 0.0022 | | | [CVE-2024-43879](https://patchblox.com/security/data/cve/CVE-2024-43879.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b... | 5.5 | 0.0022 | | | [CVE-2024-43908](https://patchblox.com/security/data/cve/CVE-2024-43908.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer dereference to... | 5.5 | 0.0022 | | | [CVE-2024-43867](https://patchblox.com/security/data/cve/CVE-2024-43867.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix refcount underflow Call... | 5.5 | 0.0022 | | | [CVE-2024-43841](https://patchblox.com/security/data/cve/CVE-2024-43841.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: avoid reporting connection succ... | 5.5 | 0.0021 | | | [CVE-2024-41020](https://patchblox.com/security/data/cve/CVE-2024-41020.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 6.7 | 0.0020 | | | [CVE-2024-41063](https://patchblox.com/security/data/cve/CVE-2024-41063.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b... | 5.5 | 0.0018 | | | [CVE-2024-44954](https://patchblox.com/security/data/cve/CVE-2024-44954.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There c... | 5.0 | 0.0018 | | | [CVE-2024-42308](https://patchblox.com/security/data/cve/CVE-2024-42308.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a | | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.