Linux · Security advisory · April 30, 2024
ALSA-2024:2394: Security update for 62 packages
ALSA-2024:2394, released April 30, 2024, fixes 61 CVEs across 62 products. One of them is being exploited (CVE-2024-1086); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEVKnown ransomware use
CVEs closed
61
None rated Critical
Exploited
1
CVE-2024-1086
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2806
98th percentile
Priority of the 61 CVEs
Patch now 1
Urgent 0
High 50
Routine 10
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | almalinux 9 | 7.3.0-427.13.1.el9_4 |
| kernel | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-debug | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-debug-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-debug-devel | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-debug-devel-matched | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-debug-modules | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-debug-modules-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-debug-modules-extra | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-devel | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-devel-matched | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-modules | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-modules-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-64k-modules-extra | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-abi-stablelists | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-cross-headers | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-debug | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-debug-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-debug-devel | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-debug-devel-matched | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-debug-modules | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-debug-modules-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-debug-modules-extra | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-debug-uki-virt | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-devel | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-devel-matched | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-doc | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-headers | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-modules | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-modules-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-modules-extra | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-rt | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-rt-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-rt-debug | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-rt-debug-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-rt-debug-devel | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-rt-debug-modules | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-rt-debug-modules-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-rt-debug-modules-extra | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-rt-devel | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-rt-modules | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-rt-modules-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-rt-modules-extra | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-tools | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-tools-libs | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-tools-libs-devel | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-uki-virt | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-zfcpdump | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-zfcpdump-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-zfcpdump-devel | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-zfcpdump-devel-matched | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-zfcpdump-modules | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-zfcpdump-modules-core | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| kernel-zfcpdump-modules-extra | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| libperf | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| perf | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| python3-perf | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| rtla | almalinux 9 | 5.14.0-427.13.1.el9_4 |
| rv | almalinux 9 | 5.14.0-427.13.1.el9_4 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-1086 | linux: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local... | 7.8 | 0.2806 | KEVRansomwareExploited | |
| High | CVE-2024-0565 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... | 7.4 | 0.0200 | None reported | |
| High | CVE-2023-6121 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0164 | None reported | |
| High | CVE-2023-24023 | Mitre: CVE-2023-24023 Bluetooth Vulnerability | 8.0 | 0.0129 | Exploitation Less Likely | |
| High | CVE-2023-25775 | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 9.8 | 0.0105 | None reported | |
| High | CVE-2023-52434 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 8.0 | 0.0102 | None reported | |
| High | CVE-2020-26555 | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B... | 7.0 | 0.0089 | None reported | |
| High | CVE-2022-45934 | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0079 | None reported | |
| High | CVE-2024-26584 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0074 | None reported | |
| High | CVE-2023-6546 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... | 7.0 | 0.0074 | None reported | |
| High | CVE-2024-26582 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: G... | 7.8 | 0.0072 | None reported | |
| High | CVE-2023-6931 | linux: A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited t... | 7.0 | 0.0072 | None reported | |
| High | CVE-2023-37453 | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0065 | None reported | |
| High | CVE-2024-26585 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B... | 7.0 | 0.0059 | None reported | |
| High | CVE-2024-26583 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.0 | 0.0055 | None reported | |
| High | CVE-2023-51780 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 8.0 | 0.0051 | None reported | |
| High | CVE-2023-42754 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0043 | None reported | |
| High | CVE-2023-39193 | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0042 | None reported | |
| High | CVE-2023-3567 | linux: A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel | 8.0 | 0.0042 | None reported | |
| High | CVE-2023-39194 | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0042 | None reported | |
| High | CVE-2023-39198 | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0042 | None reported | |
| High | CVE-2023-39189 | kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0040 | None reported | |
| High | CVE-2023-6932 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0037 | None reported | |
| High | CVE-2023-52522 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0034 | None reported | |
| High | CVE-2023-31083 | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0033 | None reported |
Showing 1 to 25 of 61
1Next