Linux · Security advisory · May 22, 2024

ALSA-2024:2950: Security update for 12 packages

ALSA-2024:2950, released May 22, 2024, fixes 48 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
48
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0762
94th percentile

Priority of the 48 CVEs

Patch now 0 Urgent 0 High 48 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-rtalmalinux 84.18.0-553.rt7.342.el8_10
kernel-rt-corealmalinux 84.18.0-553.rt7.342.el8_10
kernel-rt-debugalmalinux 84.18.0-553.rt7.342.el8_10
kernel-rt-debug-corealmalinux 84.18.0-553.rt7.342.el8_10
kernel-rt-debug-develalmalinux 84.18.0-553.rt7.342.el8_10
kernel-rt-debug-kvmalmalinux 84.18.0-553.rt7.342.el8_10
kernel-rt-debug-modulesalmalinux 84.18.0-553.rt7.342.el8_10
kernel-rt-debug-modules-extraalmalinux 84.18.0-553.rt7.342.el8_10
kernel-rt-develalmalinux 84.18.0-553.rt7.342.el8_10
kernel-rt-kvmalmalinux 84.18.0-553.rt7.342.el8_10
kernel-rt-modulesalmalinux 84.18.0-553.rt7.342.el8_10
kernel-rt-modules-extraalmalinux 84.18.0-553.rt7.342.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-15505 kernel-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0762 None reported
High CVE-2022-23222 kernel-zfcpdump-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0192 None reported
High CVE-2023-6121 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0164 None reported
High CVE-2023-24023 Mitre: CVE-2023-24023 Bluetooth Vulnerability 8.0 0.0129 Exploitation Less Likely
High CVE-2021-4204 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0125 None reported
High CVE-2023-25775 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 9.8 0.0105 None reported
High CVE-2023-52434 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 8.0 0.0102 None reported
High CVE-2023-52340 linux: The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed... 8.0 0.0094 None reported
High CVE-2019-13631 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0082 None reported
High CVE-2022-45934 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0079 None reported
High CVE-2023-37453 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0065 None reported
High CVE-2023-51780 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 8.0 0.0051 None reported
High CVE-2020-25656 kernel-zfcpdump-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0044 None reported
High CVE-2023-42754 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0043 None reported
High CVE-2023-39193 kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0042 None reported
High CVE-2023-3567 linux: A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel 8.0 0.0042 None reported
High CVE-2023-39194 kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0042 None reported
High CVE-2023-39198 kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0042 None reported
High CVE-2023-39189 kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0040 None reported
High CVE-2023-42755 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0040 None reported
High CVE-2023-39192 kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0040 None reported
High CVE-2023-6932 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0037 None reported
High CVE-2021-3753 kernel-doc: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0036 None reported
High CVE-2022-0500 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0036 None reported
High CVE-2022-3565 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0035 None reported
Showing 1 to 25 of 48 1Next