Linux · Security advisory · November 14, 2024

ELSA-2024-9315: Security update for 30 packages

ELSA-2024-9315, released November 14, 2024, fixes 477 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
477
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0239
84th percentile

Priority of the 477 CVEs

Patch now 0 Urgent 1 High 185 Routine 291

Fixed package versions

ProductReleaseFixed in
bpftoolol 90:7.4.0-503.11.1.el9_5
kernelol 90:5.14.0-503.11.1.el9_5
kernel-abi-stablelistsol 90:5.14.0-503.11.1.el9_5
kernel-coreol 90:5.14.0-503.11.1.el9_5
kernel-cross-headersol 90:5.14.0-503.11.1.el9_5
kernel-debugol 90:5.14.0-503.11.1.el9_5
kernel-debug-coreol 90:5.14.0-503.11.1.el9_5
kernel-debug-develol 90:5.14.0-503.11.1.el9_5
kernel-debug-devel-matchedol 90:5.14.0-503.11.1.el9_5
kernel-debug-modulesol 90:5.14.0-503.11.1.el9_5
kernel-debug-modules-coreol 90:5.14.0-503.11.1.el9_5
kernel-debug-modules-extraol 90:5.14.0-503.11.1.el9_5
kernel-debug-uki-virtol 90:5.14.0-503.11.1.el9_5
kernel-develol 90:5.14.0-503.11.1.el9_5
kernel-devel-matchedol 90:5.14.0-503.11.1.el9_5
kernel-docol 90:5.14.0-503.11.1.el9_5
kernel-headersol 90:5.14.0-503.11.1.el9_5
kernel-modulesol 90:5.14.0-503.11.1.el9_5
kernel-modules-coreol 90:5.14.0-503.11.1.el9_5
kernel-modules-extraol 90:5.14.0-503.11.1.el9_5
kernel-toolsol 90:5.14.0-503.11.1.el9_5
kernel-tools-libsol 90:5.14.0-503.11.1.el9_5
kernel-tools-libs-develol 90:5.14.0-503.11.1.el9_5
kernel-uki-virtol 90:5.14.0-503.11.1.el9_5
kernel-uki-virt-addonsol 90:5.14.0-503.11.1.el9_5
libperfol 90:5.14.0-503.11.1.el9_5
perfol 90:5.14.0-503.11.1.el9_5
python3-perfol 90:5.14.0-503.11.1.el9_5
rtlaol 90:5.14.0-503.11.1.el9_5
rvol 90:5.14.0-503.11.1.el9_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2024-35869 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 9.8 0.0065 None reported
High CVE-2021-47384 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0103 None reported
High CVE-2024-36896 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 9.1 0.0092 None reported
High CVE-2024-26924 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0085 None reported
High CVE-2023-52696 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.5 0.0082 None reported
High CVE-2024-41007 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0077 None reported
High CVE-2024-38605 linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment a... 7.8 0.0075 None reported
High CVE-2024-36031 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 9.8 0.0075 None reported
High CVE-2024-35853 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.0 0.0073 None reported
High CVE-2024-26782 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0072 None reported
High CVE-2024-26882 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0070 None reported
High CVE-2023-52775 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0067 None reported
High CVE-2024-35861 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0066 None reported
High CVE-2024-35862 smb: client: fix potential UAF in smb2_is_network_name_deleted() 7.8 0.0066 None reported
High CVE-2024-35863 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0066 None reported
High CVE-2024-35864 smb: client: fix potential UAF in smb2_is_valid_lease_break() 7.8 0.0066 None reported
High CVE-2024-35865 smb: client: fix potential UAF in smb2_is_valid_oplock_break() 9.8 0.0063 None reported
High CVE-2024-35835 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0063 None reported
High CVE-2024-26857 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.3 0.0061 None reported
High CVE-2024-35888 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.3 0.0061 None reported
High CVE-2024-26890 linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: fix out of bounds memory acces... 7.8 0.0061 None reported
High CVE-2024-23307 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: M... 7.8 0.0059 None reported
High CVE-2024-35854 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0058 None reported
High CVE-2024-44970 net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink 7.8 0.0056 None reported
High CVE-2023-52624 drm/amd/display: Wake DMCUB before executing GPINT commands 7.8 0.0039 None reported
Showing 1 to 25 of 477 1Next