Linux · Security advisory · April 8, 2024

ELSA-2024-12271: Security update for 9 packages

ELSA-2024-12271, released April 8, 2024, fixes 5 CVEs across 9 products. One of them is being exploited (CVE-2024-1086); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use
CVEs closed
5
None rated Critical
Exploited
1
CVE-2024-1086
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2806
98th percentile

Priority of the 5 CVEs

Patch now 1 Urgent 0 High 0 Routine 4

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.330.7.1.el8uek
kernel-uek-debugol 80:5.4.17-2136.330.7.1.el8uek
kernel-uek-debug-develol 80:5.4.17-2136.330.7.1.el8uek
kernel-uek-develol 80:5.4.17-2136.330.7.1.el8uek
kernel-uek-docol 80:5.4.17-2136.330.7.1.el8uek
kernel-uek-toolsol 80:5.4.17-2136.330.7.1.el7uek
kernel-uek-tools-libsol 80:5.4.17-2136.330.7.1.el7uek
perfol 80:5.4.17-2136.330.7.1.el7uek
python-perfol 80:5.4.17-2136.330.7.1.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2024-1086 linux: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local... 7.8 0.2806 KEVRansomwareExploited
Routine CVE-2024-2201 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 4.7 0.0879 None reported
Routine CVE-2024-0607 linux: A flaw was found in the Netfilter subsystem in the Linux kernel 6.6 0.0026 None reported
Routine CVE-2024-0340 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: M... 5.5 0.0024 None reported
Routine CVE-2024-26679 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 5.5 0.0018 None reported
Showing 1 to 5 of 5 1