Linux · Security advisory · November 12, 2024

ELSA-2024-12813: Security update for 11 packages

ELSA-2024-12813, released November 12, 2024, fixes 73 CVEs across 11 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
73
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0089
59th percentile

Priority of the 73 CVEs

Patch now 0 Urgent 0 High 29 Routine 44

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.337.5.el8uek
kernel-uek-containerol 80:5.4.17-2136.337.5.el8uek
kernel-uek-container-debugol 80:5.4.17-2136.337.5.el8uek
kernel-uek-debugol 80:5.4.17-2136.337.5.el8uek
kernel-uek-debug-develol 80:5.4.17-2136.337.5.el8uek
kernel-uek-develol 80:5.4.17-2136.337.5.el8uek
kernel-uek-docol 80:5.4.17-2136.337.5.el8uek
kernel-uek-toolsol 80:5.4.17-2136.337.5.el7uek
kernel-uek-tools-libsol 80:5.4.17-2136.337.5.el7uek
perfol 80:5.4.17-2136.337.5.el7uek
python-perfol 80:5.4.17-2136.337.5.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-44998 linux: In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeue... 7.8 0.0079 None reported
High CVE-2024-44988 linux: In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If... 7.1 0.0036 None reported
High CVE-2023-31083 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0033 None reported
High CVE-2024-46744 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... 7.8 0.0030 None reported
High CVE-2024-46800 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0030 None reported
High CVE-2024-46673 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0030 None reported
High CVE-2024-46743 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.1 0.0029 None reported
High CVE-2024-46740 linux: In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF caused by offsets overwrite Bin... 7.8 0.0029 None reported
High CVE-2024-45016 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.0 0.0028 None reported
High CVE-2024-46759 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0028 None reported
High CVE-2024-46674 linux: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref co... 7.8 0.0028 None reported
High CVE-2024-46747 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.1 0.0028 None reported
High CVE-2024-46818 linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpio_id before used as ar... 7.8 0.0027 None reported
High CVE-2024-46815 linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check num_valid_sets before acc... 7.8 0.0026 None reported
High CVE-2024-44999 linux: In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtp_dev_xmit() syz... 7.1 0.0026 None reported
High CVE-2024-46844 linux: In the Linux kernel, the following vulnerability has been resolved: um: line: always fill *error_out in setup_one_li... 7.8 0.0026 None reported
High CVE-2024-44987 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0026 None reported
High CVE-2024-46722 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.1 0.0025 None reported
High CVE-2024-46723 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.1 0.0025 None reported
High CVE-2024-46828 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0025 None reported
High CVE-2024-42228 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0024 None reported
High CVE-2024-45026 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0024 None reported
High CVE-2024-26951 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0023 None reported
High CVE-2024-46782 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0023 None reported
High CVE-2024-41011 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0022 None reported
Showing 1 to 25 of 73 1Next