Linux · Security advisory · November 11, 2024

ELSA-2024-12815: Security update for 14 packages

ELSA-2024-12815, released November 11, 2024, fixes 206 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
206
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0092
60th percentile

Priority of the 206 CVEs

Patch now 0 Urgent 0 High 69 Routine 137

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-302.167.6.el9uek
bpftoolol 90:5.15.0-302.167.6.el9uek
kernel-uekol 80:5.15.0-302.167.6.el9uek
kernel-uekol 90:5.15.0-302.167.6.el9uek
kernel-uek-containerol 80:5.15.0-302.167.6.el9uek
kernel-uek-containerol 90:5.15.0-302.167.6.el9uek
kernel-uek-container-debugol 80:5.15.0-302.167.6.el9uek
kernel-uek-container-debugol 90:5.15.0-302.167.6.el9uek
kernel-uek-coreol 80:5.15.0-302.167.6.el9uek
kernel-uek-coreol 90:5.15.0-302.167.6.el9uek
kernel-uek-debugol 80:5.15.0-302.167.6.el9uek
kernel-uek-debugol 90:5.15.0-302.167.6.el9uek
kernel-uek-debug-coreol 80:5.15.0-302.167.6.el9uek
kernel-uek-debug-coreol 90:5.15.0-302.167.6.el9uek
kernel-uek-debug-develol 80:5.15.0-302.167.6.el9uek
kernel-uek-debug-develol 90:5.15.0-302.167.6.el9uek
kernel-uek-debug-modulesol 80:5.15.0-302.167.6.el9uek
kernel-uek-debug-modulesol 90:5.15.0-302.167.6.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-302.167.6.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-302.167.6.el9uek
kernel-uek-develol 80:5.15.0-302.167.6.el9uek
kernel-uek-develol 90:5.15.0-302.167.6.el9uek
kernel-uek-docol 80:5.15.0-302.167.6.el9uek
kernel-uek-docol 90:5.15.0-302.167.6.el9uek
kernel-uek-modulesol 80:5.15.0-302.167.6.el9uek
kernel-uek-modulesol 90:5.15.0-302.167.6.el9uek
kernel-uek-modules-extraol 80:5.15.0-302.167.6.el9uek
kernel-uek-modules-extraol 90:5.15.0-302.167.6.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-42284 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0092 None reported
High CVE-2024-44985 linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UAF in ip6_xmit() If skb... 7.8 0.0088 None reported
High CVE-2024-42285 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destr... 7.8 0.0087 None reported
High CVE-2024-44998 linux: In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeue... 7.8 0.0079 None reported
High CVE-2024-44986 linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2()... 7.8 0.0072 None reported
High CVE-2024-41073 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: e... 8.1 0.0067 None reported
High CVE-2024-43883 linux: In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new... 7.1 0.0065 None reported
High CVE-2024-26585 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B... 7.0 0.0059 None reported
High CVE-2024-44988 linux: In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If... 7.1 0.0036 None reported
High CVE-2023-31083 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0033 None reported
High CVE-2024-41042 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0032 None reported
High CVE-2024-46713 kernel-default: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0030 None reported
High CVE-2024-46744 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... 7.8 0.0030 None reported
High CVE-2024-46800 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0030 None reported
High CVE-2024-46673 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0030 None reported
High CVE-2024-46743 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.1 0.0029 None reported
High CVE-2024-46740 linux: In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF caused by offsets overwrite Bin... 7.8 0.0029 None reported
High CVE-2024-38538 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.1 0.0028 None reported
High CVE-2024-45016 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.0 0.0028 None reported
High CVE-2024-46759 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0028 None reported
High CVE-2024-42265 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0028 None reported
High CVE-2024-46674 linux: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref co... 7.8 0.0028 None reported
High CVE-2024-46747 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.1 0.0028 None reported
High CVE-2024-41059 linux: In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot... 7.1 0.0027 None reported
High CVE-2024-46818 linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpio_id before used as ar... 7.8 0.0027 None reported
Showing 1 to 25 of 206 1Next