Linux · Security advisory · August 12, 2024
ELSA-2024-12581: Security update for 9 packages
ELSA-2024-12581, released August 12, 2024, fixes 50 CVEs across 9 products. One of them is being exploited (CVE-2024-36971); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
50
None rated Critical
Exploited
1
CVE-2024-36971
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0270
86th percentile
Priority of the 50 CVEs
Patch now 1
Urgent 0
High 21
Routine 28
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-uek | ol 8 | 0:5.4.17-2136.334.6.el7uek |
| kernel-uek-debug | ol 8 | 0:5.4.17-2136.334.6.el7uek |
| kernel-uek-debug-devel | ol 8 | 0:5.4.17-2136.334.6.el7uek |
| kernel-uek-devel | ol 8 | 0:5.4.17-2136.334.6.el7uek |
| kernel-uek-doc | ol 8 | 0:5.4.17-2136.334.6.el7uek |
| kernel-uek-tools | ol 8 | 0:5.4.17-2136.334.6.el7uek |
| kernel-uek-tools-libs | ol 8 | 0:5.4.17-2136.334.6.el7uek |
| perf | ol 8 | 0:5.4.17-2136.334.6.el7uek |
| python-perf | ol 8 | 0:5.4.17-2136.334.6.el7uek |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-36971 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0270 | KEVExploited | |
| High | CVE-2024-38558 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0082 | None reported | |
| High | CVE-2024-38612 | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The... | 7.0 | 0.0066 | None reported | |
| High | CVE-2024-38552 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0030 | None reported | |
| High | CVE-2024-38621 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0028 | None reported | |
| High | CVE-2024-39480 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0027 | None reported | |
| High | CVE-2024-36016 | linux: In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_r... | 7.8 | 0.0027 | None reported | |
| High | CVE-2024-38560 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0027 | None reported | |
| High | CVE-2024-38578 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0026 | None reported | |
| High | CVE-2024-35976 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0026 | None reported | |
| High | CVE-2024-38583 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0026 | None reported | |
| High | CVE-2024-38579 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0025 | None reported | |
| High | CVE-2024-38559 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0025 | None reported | |
| High | CVE-2024-38627 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0025 | None reported | |
| High | CVE-2024-36015 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0025 | None reported | |
| High | CVE-2024-37356 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 | None reported | |
| High | CVE-2024-38599 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0025 | None reported | |
| High | CVE-2024-38659 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0025 | None reported | |
| High | CVE-2024-39471 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0024 | None reported | |
| High | CVE-2024-39467 | linux: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on i_xattr_nid in s... | 7.1 | 0.0024 | None reported | |
| High | CVE-2024-38635 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0024 | None reported | |
| High | CVE-2024-39503 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.0 | 0.0022 | None reported | |
| Routine | CVE-2024-38582 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0086 | None reported | |
| Routine | CVE-2024-36288 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0074 | None reported | |
| Routine | CVE-2024-38565 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0074 | None reported |
Showing 1 to 25 of 50
1Next