Linux · Security advisory · December 16, 2024

ELSA-2024-12884: Security update for 11 packages

ELSA-2024-12884, released December 16, 2024, fixes 120 CVEs across 11 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
120
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0136
71st percentile

Priority of the 120 CVEs

Patch now 0 Urgent 0 High 49 Routine 71

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.338.4.1.el8uek
kernel-uek-containerol 80:5.4.17-2136.338.4.1.el8uek
kernel-uek-container-debugol 80:5.4.17-2136.338.4.1.el8uek
kernel-uek-debugol 80:5.4.17-2136.338.4.1.el8uek
kernel-uek-debug-develol 80:5.4.17-2136.338.4.1.el8uek
kernel-uek-develol 80:5.4.17-2136.338.4.1.el8uek
kernel-uek-docol 80:5.4.17-2136.338.4.1.el8uek
kernel-uek-toolsol 80:5.4.17-2136.338.4.1.el7uek
kernel-uek-tools-libsol 80:5.4.17-2136.338.4.1.el7uek
perfol 80:5.4.17-2136.338.4.1.el7uek
python-perfol 80:5.4.17-2136.338.4.1.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-47685 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 9.1 0.0136 None reported
High CVE-2024-49997 linux: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosur... 7.5 0.0106 None reported
High CVE-2024-50033 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.1 0.0079 None reported
High CVE-2024-47696 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#ch... 7.8 0.0073 None reported
High CVE-2024-53059 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0040 None reported
High CVE-2024-49982 linux: In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in... 7.8 0.0038 None reported
High CVE-2024-49894 linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in dega... 7.8 0.0033 None reported
High CVE-2024-49882 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0032 None reported
High CVE-2024-53057 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0029 None reported
High CVE-2024-47742 linux: In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Block path traversal Most firm... 7.8 0.0029 None reported
High CVE-2024-47723 linux: In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG() and diAlloc... 7.1 0.0029 None reported
High CVE-2024-50151 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0028 None reported
High CVE-2024-47697 linux: In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: fix an ou... 7.8 0.0028 None reported
High CVE-2024-50230 linux: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing o... 7.8 0.0028 None reported
High CVE-2024-49900 linux: In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buf... 7.1 0.0028 None reported
High CVE-2024-50143 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0028 None reported
High CVE-2024-49883 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0028 None reported
High CVE-2024-50035 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.1 0.0027 None reported
High CVE-2024-50262 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B... 7.8 0.0027 None reported
High CVE-2024-49966 linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqi_sync_work before freeing oinfo... 7.8 0.0027 None reported
High CVE-2024-47698 linux: In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2832: fix an ou... 7.8 0.0027 None reported
High CVE-2024-50180 linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fix strbuf array overflow The val... 7.8 0.0026 None reported
High CVE-2024-49903 linux: In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uaf in dbFreeBits [syzbot reported] ==... 7.0 0.0026 None reported
High CVE-2024-49860 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.1 0.0025 None reported
High CVE-2024-50167 linux: In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in be_xmit()... 7.1 0.0025 None reported
Showing 1 to 25 of 120 1Next