Linux · Security advisory · September 24, 2024
ELSA-2024-6997: Security update for 29 packages
ELSA-2024-6997, released September 24, 2024, fixes 21 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
21
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0100
63rd percentile
Priority of the 21 CVEs
Patch now 0
Urgent 0
High 13
Routine 8
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | ol 9 | 0:7.3.0-427.37.1.el9_4 |
| kernel | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-abi-stablelists | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-core | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-cross-headers | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-debug | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-debug-core | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-debug-devel | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-debug-devel-matched | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-debug-modules | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-debug-modules-core | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-debug-modules-extra | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-debug-uki-virt | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-devel | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-devel-matched | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-doc | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-headers | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-modules | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-modules-core | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-modules-extra | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-tools | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-tools-libs | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-tools-libs-devel | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| kernel-uki-virt | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| libperf | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| perf | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| python3-perf | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| rtla | ol 9 | 0:5.14.0-427.37.1.el9_4 |
| rv | ol 9 | 0:5.14.0-427.37.1.el9_4 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2024-38573 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.5 | 0.0100 | None reported | |
| High | CVE-2024-38570 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0068 | None reported | |
| High | CVE-2024-42225 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0053 | None reported | |
| High | CVE-2023-52439 | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: M... | 7.8 | 0.0030 | None reported | |
| High | CVE-2024-26739 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0028 | None reported | |
| High | CVE-2024-27022 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0027 | None reported | |
| High | CVE-2024-36016 | linux: In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_r... | 7.8 | 0.0027 | None reported | |
| High | CVE-2024-38562 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0024 | None reported | |
| High | CVE-2024-26930 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... | 7.8 | 0.0023 | None reported | |
| High | CVE-2024-42246 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 | None reported | |
| High | CVE-2024-36899 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0018 | None reported | |
| High | CVE-2024-26929 | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of fcport The se... | 7.8 | n/a | None reported | |
| High | CVE-2024-41071 | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.8 | n/a | None reported | |
| Routine | CVE-2024-26931 | perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p... | 5.5 | 0.0037 | None reported | |
| Routine | CVE-2024-40984 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0030 | None reported | |
| Routine | CVE-2024-38615 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0024 | None reported | |
| Routine | CVE-2024-26947 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... | 5.5 | 0.0023 | None reported | |
| Routine | CVE-2024-26991 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0023 | None reported | |
| Routine | CVE-2024-35895 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0018 | None reported | |
| Routine | CVE-2023-52884 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 4.4 | 0.0018 | None reported | |
| Routine | CVE-2024-38601 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 4.7 | 0.0018 | None reported |
Showing 1 to 21 of 21
1