Linux · Security advisory · April 30, 2024

RHSA-2024:2394: Security update for 62 packages

RHSA-2024:2394, released April 30, 2024, fixes 339 CVEs across 62 products. One of them is being exploited (CVE-2024-1086); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use
CVEs closed
339
3 rated Critical
Exploited
1
CVE-2024-1086
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2806
98th percentile

Priority of the 339 CVEs

Patch now 1 Urgent 3 High 194 Routine 141

Fixed package versions

ProductReleaseFixed in
bpftoolRHEL 90:7.3.0-427.13.1.el9_4
kernelRHEL 90:5.14.0-427.13.1.el9_4
kernel-64kRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-debugRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-debug-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-debug-develRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-debug-devel-matchedRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-debug-modulesRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-debug-modules-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-debug-modules-extraRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-develRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-devel-matchedRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-modulesRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-modules-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-64k-modules-extraRHEL 90:5.14.0-427.13.1.el9_4
kernel-abi-stablelistsRHEL 90:5.14.0-427.13.1.el9_4
kernel-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-debugRHEL 90:5.14.0-427.13.1.el9_4
kernel-debug-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-debug-develRHEL 90:5.14.0-427.13.1.el9_4
kernel-debug-devel-matchedRHEL 90:5.14.0-427.13.1.el9_4
kernel-debug-modulesRHEL 90:5.14.0-427.13.1.el9_4
kernel-debug-modules-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-debug-modules-extraRHEL 90:5.14.0-427.13.1.el9_4
kernel-debug-uki-virtRHEL 90:5.14.0-427.13.1.el9_4
kernel-develRHEL 90:5.14.0-427.13.1.el9_4
kernel-devel-matchedRHEL 90:5.14.0-427.13.1.el9_4
kernel-docRHEL 90:5.14.0-427.13.1.el9_4
kernel-modulesRHEL 90:5.14.0-427.13.1.el9_4
kernel-modules-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-modules-extraRHEL 90:5.14.0-427.13.1.el9_4
kernel-rtRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-debugRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-debug-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-debug-develRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-debug-kvmRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-debug-modulesRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-debug-modules-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-debug-modules-extraRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-develRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-kvmRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-modulesRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-modules-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-rt-modules-extraRHEL 90:5.14.0-427.13.1.el9_4
kernel-toolsRHEL 90:5.14.0-427.13.1.el9_4
kernel-tools-libsRHEL 90:5.14.0-427.13.1.el9_4
kernel-tools-libs-develRHEL 90:5.14.0-427.13.1.el9_4
kernel-uki-virtRHEL 90:5.14.0-427.13.1.el9_4
kernel-zfcpdumpRHEL 90:5.14.0-427.13.1.el9_4
kernel-zfcpdump-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-zfcpdump-develRHEL 90:5.14.0-427.13.1.el9_4
kernel-zfcpdump-devel-matchedRHEL 90:5.14.0-427.13.1.el9_4
kernel-zfcpdump-modulesRHEL 90:5.14.0-427.13.1.el9_4
kernel-zfcpdump-modules-coreRHEL 90:5.14.0-427.13.1.el9_4
kernel-zfcpdump-modules-extraRHEL 90:5.14.0-427.13.1.el9_4
libperfRHEL 90:5.14.0-427.13.1.el9_4
perfRHEL 90:5.14.0-427.13.1.el9_4
python3-perfRHEL 90:5.14.0-427.13.1.el9_4
rtlaRHEL 90:5.14.0-427.13.1.el9_4
rvRHEL 90:5.14.0-427.13.1.el9_4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2024-1086 linux: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local... 7.8 0.2806 KEVRansomwareExploited
Urgent CVE-2023-54184 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsit: Free cmds before session f... 9.8 0.0057 None reported
Urgent CVE-2023-54292 kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... 9.8 0.0055 None reported
Urgent CVE-2023-53751 linux: In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_S... 9.8 0.0042 None reported
High CVE-2024-0565 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... 7.4 0.0200 None reported
High CVE-2023-6121 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0164 None reported
High CVE-2023-24023 Mitre: CVE-2023-24023 Bluetooth Vulnerability 8.0 0.0129 Exploitation Less Likely
High CVE-2023-52832 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 9.1 0.0126 None reported
High CVE-2023-25775 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 9.8 0.0105 None reported
High CVE-2023-52434 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 8.0 0.0102 None reported
High CVE-2020-26555 python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B... 7.0 0.0089 None reported
High CVE-2022-45934 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0079 None reported
High CVE-2024-26584 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.0 0.0074 None reported
High CVE-2023-6546 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... 7.0 0.0074 None reported
High CVE-2024-26582 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: G... 7.8 0.0072 None reported
High CVE-2023-6931 linux: A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited t... 7.0 0.0072 None reported
High CVE-2023-52628 kernel-64k: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: G... 7.1 0.0067 None reported
High CVE-2023-37453 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0065 None reported
High CVE-2023-52881 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.0 0.0061 None reported
High CVE-2024-26585 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B... 7.0 0.0059 None reported
High CVE-2023-54090 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: G... 9.8 0.0059 None reported
High CVE-2023-53338 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0055 None reported
High CVE-2024-26583 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.0 0.0055 None reported
High CVE-2023-51780 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 8.0 0.0051 None reported
High CVE-2023-53335 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0049 None reported
Showing 1 to 25 of 339 1Next