Linux · Security advisory · March 15, 2024

ELSA-2024-1248: Security update for 27 packages

ELSA-2024-1248, released March 15, 2024, fixes 11 CVEs across 27 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
11
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0155
75th percentile

Priority of the 11 CVEs

Patch now 0 Urgent 0 High 11 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolol 90:7.2.0-362.24.1.el9_3
kernelol 90:5.14.0-362.24.1.el9_3
kernel-abi-stablelistsol 90:5.14.0-362.24.1.el9_3
kernel-coreol 90:5.14.0-362.24.1.el9_3
kernel-cross-headersol 90:5.14.0-362.24.1.el9_3
kernel-debugol 90:5.14.0-362.24.1.el9_3
kernel-debug-coreol 90:5.14.0-362.24.1.el9_3
kernel-debug-develol 90:5.14.0-362.24.1.el9_3
kernel-debug-devel-matchedol 90:5.14.0-362.24.1.el9_3
kernel-debug-modulesol 90:5.14.0-362.24.1.el9_3
kernel-debug-modules-coreol 90:5.14.0-362.24.1.el9_3
kernel-debug-modules-extraol 90:5.14.0-362.24.1.el9_3
kernel-develol 90:5.14.0-362.24.1.el9_3
kernel-devel-matchedol 90:5.14.0-362.24.1.el9_3
kernel-docol 90:5.14.0-362.24.1.el9_3
kernel-headersol 90:5.14.0-362.24.1.el9_3
kernel-modulesol 90:5.14.0-362.24.1.el9_3
kernel-modules-coreol 90:5.14.0-362.24.1.el9_3
kernel-modules-extraol 90:5.14.0-362.24.1.el9_3
kernel-toolsol 90:5.14.0-362.24.1.el9_3
kernel-tools-libsol 90:5.14.0-362.24.1.el9_3
kernel-tools-libs-develol 90:5.14.0-362.24.1.el9_3
libperfol 90:5.14.0-362.24.1.el9_3
perfol 90:5.14.0-362.24.1.el9_3
python3-perfol 90:5.14.0-362.24.1.el9_3
rtlaol 90:5.14.0-362.24.1.el9_3
rvol 90:5.14.0-362.24.1.el9_3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-6535 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.5 0.0155 None reported
High CVE-2023-6536 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.5 0.0155 None reported
High CVE-2023-6356 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.5 0.0146 None reported
High CVE-2023-5717 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0091 None reported
High CVE-2024-0193 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... 7.8 0.0084 None reported
High CVE-2023-6606 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.1 0.0053 None reported
High CVE-2023-6610 linux: An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel 7.1 0.0043 None reported
High CVE-2023-6817 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0033 None reported
High CVE-2023-51042 linux: In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence us... 7.8 0.0032 None reported
High CVE-2024-0646 kpatch-patch-4_18_0-513_11_1: This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of... 7.8 0.0031 None reported
High CVE-2023-4244 linux: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local... 8.0 0.0024 None reported
Showing 1 to 11 of 11 1