Linux · Security advisory · May 22, 2024

RHSA-2024:3138: Security update for 23 packages

RHSA-2024:3138, released May 22, 2024, fixes 163 CVEs across 23 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
163
4 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0762
94th percentile

Priority of the 163 CVEs

Patch now 0 Urgent 4 High 157 Routine 2

Fixed package versions

ProductReleaseFixed in
bpftoolRHEL 80:4.18.0-553.el8_10
kernelRHEL 80:4.18.0-553.el8_10
kernel-abi-stablelistsRHEL 80:4.18.0-553.el8_10
kernel-coreRHEL 80:4.18.0-553.el8_10
kernel-debugRHEL 80:4.18.0-553.el8_10
kernel-debug-coreRHEL 80:4.18.0-553.el8_10
kernel-debug-develRHEL 80:4.18.0-553.el8_10
kernel-debug-modulesRHEL 80:4.18.0-553.el8_10
kernel-debug-modules-extraRHEL 80:4.18.0-553.el8_10
kernel-develRHEL 80:4.18.0-553.el8_10
kernel-docRHEL 80:4.18.0-553.el8_10
kernel-modulesRHEL 80:4.18.0-553.el8_10
kernel-modules-extraRHEL 80:4.18.0-553.el8_10
kernel-toolsRHEL 80:4.18.0-553.el8_10
kernel-tools-libsRHEL 80:4.18.0-553.el8_10
kernel-tools-libs-develRHEL 80:4.18.0-553.el8_10
kernel-zfcpdumpRHEL 80:4.18.0-553.el8_10
kernel-zfcpdump-coreRHEL 80:4.18.0-553.el8_10
kernel-zfcpdump-develRHEL 80:4.18.0-553.el8_10
kernel-zfcpdump-modulesRHEL 80:4.18.0-553.el8_10
kernel-zfcpdump-modules-extraRHEL 80:4.18.0-553.el8_10
perfRHEL 80:4.18.0-553.el8_10
python3-perfRHEL 80:4.18.0-553.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2022-50717 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds check on Transfer Tag tta... 9.8 0.0082 None reported
Urgent CVE-2023-54184 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsit: Free cmds before session f... 9.8 0.0057 None reported
Urgent CVE-2023-53867 linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix potential use-after-free bug when trim... 9.8 0.0053 None reported
Urgent CVE-2023-53996 kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... 9.3 0.0011 None reported
High CVE-2019-15505 kernel-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0762 None reported
High CVE-2022-23222 kernel-zfcpdump-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0192 None reported
High CVE-2023-6121 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0164 None reported
High CVE-2023-24023 Mitre: CVE-2023-24023 Bluetooth Vulnerability 8.0 0.0129 Exploitation Less Likely
High CVE-2021-4204 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0125 None reported
High CVE-2023-25775 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 9.8 0.0105 None reported
High CVE-2023-52434 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 8.0 0.0102 None reported
High CVE-2023-52340 linux: The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed... 8.0 0.0094 None reported
High CVE-2019-13631 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0082 None reported
High CVE-2022-50668 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 8.0 0.0081 None reported
High CVE-2022-45934 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0079 None reported
High CVE-2023-37453 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0065 None reported
High CVE-2023-54090 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: G... 9.8 0.0059 None reported
High CVE-2023-54004 linux: In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in __sk_me... 8.0 0.0059 None reported
High CVE-2023-53705 linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv(... 8.2 0.0056 None reported
High CVE-2023-51780 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 8.0 0.0051 None reported
High CVE-2023-53335 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0049 None reported
High CVE-2023-53586 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0046 None reported
High CVE-2020-25656 kernel-zfcpdump-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0044 None reported
High CVE-2023-42754 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0043 None reported
High CVE-2023-39193 kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.0 0.0042 None reported
Showing 1 to 25 of 163 1Next