Linux · Security advisory · August 8, 2024

ALSA-2024:5101: Security update for 25 packages

ALSA-2024:5101, released August 8, 2024, fixes 160 CVEs across 25 products. One of them is being exploited (CVE-2024-36971); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV

CVEs closed

160

None rated Critical

Exploited

CVE-2024-36971

Exploitation more likely

Vendor assessment

Highest EPSS

0.0879

95th percentile

Priority of the 160 CVEs

Patch now 1
                                Urgent 0
                                High 54
                                Routine 105

Fixed package versions

Product	Release	Fixed in
bpftool	almalinux 8	4.18.0-553.16.1.el8_10
kernel	almalinux 8	4.18.0-553.16.1.el8_10
kernel-abi-stablelists	almalinux 8	4.18.0-553.16.1.el8_10
kernel-core	almalinux 8	4.18.0-553.16.1.el8_10
kernel-cross-headers	almalinux 8	4.18.0-553.16.1.el8_10
kernel-debug	almalinux 8	4.18.0-553.16.1.el8_10
kernel-debug-core	almalinux 8	4.18.0-553.16.1.el8_10
kernel-debug-devel	almalinux 8	4.18.0-553.16.1.el8_10
kernel-debug-modules	almalinux 8	4.18.0-553.16.1.el8_10
kernel-debug-modules-extra	almalinux 8	4.18.0-553.16.1.el8_10
kernel-devel	almalinux 8	4.18.0-553.16.1.el8_10
kernel-doc	almalinux 8	4.18.0-553.16.1.el8_10
kernel-headers	almalinux 8	4.18.0-553.16.1.el8_10
kernel-modules	almalinux 8	4.18.0-553.16.1.el8_10
kernel-modules-extra	almalinux 8	4.18.0-553.16.1.el8_10
kernel-tools	almalinux 8	4.18.0-553.16.1.el8_10
kernel-tools-libs	almalinux 8	4.18.0-553.16.1.el8_10
kernel-tools-libs-devel	almalinux 8	4.18.0-553.16.1.el8_10
kernel-zfcpdump	almalinux 8	4.18.0-553.16.1.el8_10
kernel-zfcpdump-core	almalinux 8	4.18.0-553.16.1.el8_10
kernel-zfcpdump-devel	almalinux 8	4.18.0-553.16.1.el8_10
kernel-zfcpdump-modules	almalinux 8	4.18.0-553.16.1.el8_10
kernel-zfcpdump-modules-extra	almalinux 8	4.18.0-553.16.1.el8_10
perf	almalinux 8	4.18.0-553.16.1.el8_10
python3-perf	almalinux 8	4.18.0-553.16.1.el8_10

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2024-36971	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0270	KEVExploited
High	CVE-2021-47548	kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	9.8	0.0136	None reported
High	CVE-2024-36886	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0131	None reported
High	CVE-2023-52832	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	9.1	0.0126	None reported
High	CVE-2024-38573	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.5	0.0100	None reported
High	CVE-2024-36896	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	9.1	0.0092	None reported
High	CVE-2022-48747	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.5	0.0092	None reported
High	CVE-2023-52775	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0067	None reported
High	CVE-2024-36904	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0061	None reported
High	CVE-2024-36921	wifi: iwlwifi: mvm: guard against invalid STA ID on removal	7.8	0.0035	None reported
High	CVE-2024-35937	wifi: cfg80211: check A-MSDU format more carefully	7.1	0.0034	None reported
High	CVE-2023-52530	kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p...	7.8	0.0034	None reported
High	CVE-2024-39502	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0031	None reported
High	CVE-2024-40974	kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p...	7.8	0.0030	None reported
High	CVE-2023-52469	linux: In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse...	7.8	0.0029	None reported
High	CVE-2024-40927	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0029	None reported
High	CVE-2024-36960	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.1	0.0029	None reported
High	CVE-2024-38538	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.1	0.0028	None reported
High	CVE-2024-36978	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0028	None reported
High	CVE-2024-26852	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p...	7.8	0.0027	None reported
High	CVE-2023-52864	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0027	None reported
High	CVE-2024-26704	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0027	None reported
High	CVE-2024-26925	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.0	0.0027	None reported
High	CVE-2024-26772	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0027	None reported
High	CVE-2024-36016	linux: In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_r...	7.8	0.0027	None reported

Also fixes CVE-2024-36971

RHSA-2024:5101
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RXSA-2024:5101
kernel on rocky 8
ELSA-2024-5101
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
RLSA-2024:5102
kernel-rt on rocky 8
ALSA-2024:5102
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on almalinux 8
RHSA-2024:5102
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
SUSE-SU-2024:2973-1
kernel-livepatch-SLE15-SP6-RT_Update_1, kernel-rt, kernel-rt_debug and 2 more on opensuse-leap 15.6, sles 15.6
SUSE-SU-2024:2896-1
kernel-azure, kernel-source-azure, kernel-syms-azure on opensuse-leap 15.6, sles 15.6

Vendor advisory

https://osv.dev/vulnerability/ALSA-2024:5101

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo