Linux · Security advisory · October 20, 2024

ELSA-2024-12796: Security update for 14 packages

ELSA-2024-12796, released October 20, 2024, fixes 10 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
10
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0026
18th percentile

Priority of the 10 CVEs

Patch now 0 Urgent 0 High 4 Routine 6

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-301.163.5.2.el9uek
bpftoolol 90:5.15.0-301.163.5.2.el9uek
kernel-uekol 80:5.15.0-301.163.5.2.el9uek
kernel-uekol 90:5.15.0-301.163.5.2.el9uek
kernel-uek-containerol 80:5.15.0-301.163.5.2.el9uek
kernel-uek-containerol 90:5.15.0-301.163.5.2.el9uek
kernel-uek-container-debugol 80:5.15.0-301.163.5.2.el9uek
kernel-uek-container-debugol 90:5.15.0-301.163.5.2.el9uek
kernel-uek-coreol 80:5.15.0-301.163.5.2.el9uek
kernel-uek-coreol 90:5.15.0-301.163.5.2.el9uek
kernel-uek-debugol 80:5.15.0-301.163.5.2.el9uek
kernel-uek-debugol 90:5.15.0-301.163.5.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-301.163.5.2.el9uek
kernel-uek-debug-coreol 90:5.15.0-301.163.5.2.el9uek
kernel-uek-debug-develol 80:5.15.0-301.163.5.2.el9uek
kernel-uek-debug-develol 90:5.15.0-301.163.5.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-301.163.5.2.el9uek
kernel-uek-debug-modulesol 90:5.15.0-301.163.5.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-301.163.5.2.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-301.163.5.2.el9uek
kernel-uek-develol 80:5.15.0-301.163.5.2.el9uek
kernel-uek-develol 90:5.15.0-301.163.5.2.el9uek
kernel-uek-docol 80:5.15.0-301.163.5.2.el9uek
kernel-uek-docol 90:5.15.0-301.163.5.2.el9uek
kernel-uek-modulesol 80:5.15.0-301.163.5.2.el9uek
kernel-uek-modulesol 90:5.15.0-301.163.5.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-301.163.5.2.el9uek
kernel-uek-modules-extraol 90:5.15.0-301.163.5.2.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-27397 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.0 0.0026 None reported
High CVE-2024-40940 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0026 None reported
High CVE-2024-35959 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.0 0.0026 None reported
High CVE-2024-26734 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0024 None reported
Routine CVE-2024-47674 linux: In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in... 5.5 0.0025 None reported
Routine CVE-2024-35801 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 5.5 0.0024 None reported
Routine CVE-2024-42269 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix potential null-ptr-dere... 5.5 0.0023 None reported
Routine CVE-2024-42270 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix null-ptr-deref in iptab... 5.5 0.0023 None reported
Routine CVE-2024-26623 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 4.7 0.0023 None reported
Routine CVE-2024-26681 linux: In the Linux kernel, the following vulnerability has been resolved: netdevsim: avoid potential loop in nsim_dev_trap... 5.5 0.0023 None reported
Showing 1 to 10 of 10 1