Linux · Security advisory · December 18, 2024

ELSA-2024-12887: Security update for 14 packages

ELSA-2024-12887, released December 18, 2024, fixes 225 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
225
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0136
71st percentile

Priority of the 225 CVEs

Patch now 0 Urgent 0 High 76 Routine 149

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-303.171.5.2.el9uek
bpftoolol 90:5.15.0-303.171.5.2.el9uek
kernel-uekol 80:5.15.0-303.171.5.2.el9uek
kernel-uekol 90:5.15.0-303.171.5.2.el9uek
kernel-uek-containerol 80:5.15.0-303.171.5.2.el9uek
kernel-uek-containerol 90:5.15.0-303.171.5.2.el9uek
kernel-uek-container-debugol 80:5.15.0-303.171.5.2.el9uek
kernel-uek-container-debugol 90:5.15.0-303.171.5.2.el9uek
kernel-uek-coreol 80:5.15.0-303.171.5.2.el9uek
kernel-uek-coreol 90:5.15.0-303.171.5.2.el9uek
kernel-uek-debugol 80:5.15.0-303.171.5.2.el9uek
kernel-uek-debugol 90:5.15.0-303.171.5.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-303.171.5.2.el9uek
kernel-uek-debug-coreol 90:5.15.0-303.171.5.2.el9uek
kernel-uek-debug-develol 80:5.15.0-303.171.5.2.el9uek
kernel-uek-debug-develol 90:5.15.0-303.171.5.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-303.171.5.2.el9uek
kernel-uek-debug-modulesol 90:5.15.0-303.171.5.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-303.171.5.2.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-303.171.5.2.el9uek
kernel-uek-develol 80:5.15.0-303.171.5.2.el9uek
kernel-uek-develol 90:5.15.0-303.171.5.2.el9uek
kernel-uek-docol 80:5.15.0-303.171.5.2.el9uek
kernel-uek-docol 90:5.15.0-303.171.5.2.el9uek
kernel-uek-modulesol 80:5.15.0-303.171.5.2.el9uek
kernel-uek-modulesol 90:5.15.0-303.171.5.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-303.171.5.2.el9uek
kernel-uek-modules-extraol 90:5.15.0-303.171.5.2.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-47685 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 9.1 0.0136 None reported
High CVE-2024-49997 linux: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosur... 7.5 0.0106 None reported
High CVE-2024-50083 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... 7.5 0.0087 None reported
High CVE-2024-50033 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.1 0.0079 None reported
High CVE-2024-47696 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#ch... 7.8 0.0073 None reported
High CVE-2024-47695 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to con_num - 1 to stay... 7.8 0.0069 None reported
High CVE-2024-46858 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... 7.0 0.0059 None reported
High CVE-2024-50154 python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 7.0 0.0056 None reported
High CVE-2024-46865 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... 7.1 0.0055 None reported
High CVE-2024-50086 linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix user-after-free from session log off... 7.0 0.0048 None reported
High CVE-2024-53059 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0040 None reported
High CVE-2024-49982 linux: In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in... 7.8 0.0038 None reported
High CVE-2024-49930 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0038 None reported
High CVE-2024-49894 linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in dega... 7.8 0.0033 None reported
High CVE-2024-49882 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0032 None reported
High CVE-2024-53057 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0029 None reported
High CVE-2024-47742 linux: In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Block path traversal Most firm... 7.8 0.0029 None reported
High CVE-2024-47723 linux: In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG() and diAlloc... 7.1 0.0029 None reported
High CVE-2024-50151 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0028 None reported
High CVE-2024-47697 linux: In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: fix an ou... 7.8 0.0028 None reported
High CVE-2024-50230 linux: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing o... 7.8 0.0028 None reported
High CVE-2024-49900 linux: In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buf... 7.1 0.0028 None reported
High CVE-2024-49884 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0028 None reported
High CVE-2024-50143 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0028 None reported
High CVE-2024-49883 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0028 None reported
Showing 1 to 25 of 225 1Next