Linux · Security advisory · May 2, 2024
ELSA-2024-2394: Security update for 29 packages
ELSA-2024-2394, released May 2, 2024, fixes 57 CVEs across 29 products. One of them is being exploited (CVE-2024-1086); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEVKnown ransomware use
CVEs closed
57
None rated Critical
Exploited
1
CVE-2024-1086
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2806
98th percentile
Priority of the 57 CVEs
Patch now 1
Urgent 0
High 47
Routine 9
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | ol 9 | 0:7.3.0-427.13.1.el9_4 |
| kernel | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-abi-stablelists | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-core | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-cross-headers | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-debug | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-debug-core | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-debug-devel | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-debug-devel-matched | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-debug-modules | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-debug-modules-core | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-debug-modules-extra | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-debug-uki-virt | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-devel | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-devel-matched | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-doc | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-headers | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-modules | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-modules-core | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-modules-extra | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-tools | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-tools-libs | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-tools-libs-devel | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| kernel-uki-virt | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| libperf | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| perf | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| python3-perf | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| rtla | ol 9 | 0:5.14.0-427.13.1.el9_4 |
| rv | ol 9 | 0:5.14.0-427.13.1.el9_4 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-1086 | linux: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local... | 7.8 | 0.2806 | KEVRansomwareExploited | |
| High | CVE-2024-0565 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... | 7.4 | 0.0200 | None reported | |
| High | CVE-2023-6121 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0164 | None reported | |
| High | CVE-2023-24023 | Mitre: CVE-2023-24023 Bluetooth Vulnerability | 8.0 | 0.0129 | Exploitation Less Likely | |
| High | CVE-2023-25775 | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 9.8 | 0.0105 | None reported | |
| High | CVE-2023-52434 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 8.0 | 0.0102 | None reported | |
| High | CVE-2020-26555 | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B... | 7.0 | 0.0089 | None reported | |
| High | CVE-2022-45934 | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0079 | None reported | |
| High | CVE-2024-26584 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0074 | None reported | |
| High | CVE-2023-6546 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... | 7.0 | 0.0074 | None reported | |
| High | CVE-2024-26582 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: G... | 7.8 | 0.0072 | None reported | |
| High | CVE-2023-6931 | linux: A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited t... | 7.0 | 0.0072 | None reported | |
| High | CVE-2023-37453 | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0065 | None reported | |
| High | CVE-2024-26585 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B... | 7.0 | 0.0059 | None reported | |
| High | CVE-2024-26583 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.0 | 0.0055 | None reported | |
| High | CVE-2023-51780 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 8.0 | 0.0051 | None reported | |
| High | CVE-2023-42754 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0043 | None reported | |
| High | CVE-2023-39193 | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0042 | None reported | |
| High | CVE-2023-3567 | linux: A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel | 8.0 | 0.0042 | None reported | |
| High | CVE-2023-39194 | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0042 | None reported | |
| High | CVE-2023-39198 | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0042 | None reported | |
| High | CVE-2023-39189 | kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0040 | None reported | |
| High | CVE-2023-6932 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0037 | None reported | |
| High | CVE-2023-52522 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0034 | None reported | |
| High | CVE-2023-31083 | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0033 | None reported |
Showing 1 to 25 of 57
1Next