Linux · Security advisory · August 8, 2024

ALSA-2024:5102: Security update for 12 packages

ALSA-2024:5102, released August 8, 2024, fixes 149 CVEs across 12 products. One of them is being exploited (CVE-2024-36971); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
149
None rated Critical
Exploited
1
CVE-2024-36971
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0879
95th percentile

Priority of the 149 CVEs

Patch now 1 Urgent 0 High 51 Routine 97

Fixed package versions

ProductReleaseFixed in
kernel-rtalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-corealmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debugalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-corealmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-develalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-kvmalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-modulesalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-modules-extraalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-develalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-kvmalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-modulesalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-modules-extraalmalinux 84.18.0-553.16.1.rt7.357.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2024-36971 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0270 KEVExploited
High CVE-2021-47548 kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 9.8 0.0136 None reported
High CVE-2024-36886 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0131 None reported
High CVE-2023-52832 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 9.1 0.0126 None reported
High CVE-2024-38573 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.5 0.0100 None reported
High CVE-2024-36896 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 9.1 0.0092 None reported
High CVE-2022-48747 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.5 0.0092 None reported
High CVE-2024-36904 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0061 None reported
High CVE-2024-36921 wifi: iwlwifi: mvm: guard against invalid STA ID on removal 7.8 0.0035 None reported
High CVE-2024-35937 wifi: cfg80211: check A-MSDU format more carefully 7.1 0.0034 None reported
High CVE-2023-52530 kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p... 7.8 0.0034 None reported
High CVE-2024-39502 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0031 None reported
High CVE-2023-52469 linux: In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse... 7.8 0.0029 None reported
High CVE-2024-40927 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0029 None reported
High CVE-2024-36960 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.1 0.0029 None reported
High CVE-2024-38538 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.1 0.0028 None reported
High CVE-2024-36978 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0028 None reported
High CVE-2024-26852 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p... 7.8 0.0027 None reported
High CVE-2023-52864 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0027 None reported
High CVE-2024-26704 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0027 None reported
High CVE-2024-26925 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.0 0.0027 None reported
High CVE-2024-26772 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0027 None reported
High CVE-2024-36016 linux: In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_r... 7.8 0.0027 None reported
High CVE-2023-52707 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p... 7.8 0.0026 None reported
High CVE-2024-27065 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0026 None reported
Showing 1 to 25 of 149 1Next