Linux · Security advisory · August 28, 2024

RHSA-2024:5928: Security update for 62 packages

RHSA-2024:5928, released August 28, 2024, fixes 41 CVEs across 62 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0222

82nd percentile

Priority of the 41 CVEs

Patch now 0
                                Urgent 0
                                High 21
                                Routine 20

Fixed package versions

Product	Release	Fixed in
bpftool	RHEL 9	0:7.3.0-427.33.1.el9_4
kernel	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-debug	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-debug-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-debug-devel	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-debug-devel-matched	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-debug-modules	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-debug-modules-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-debug-modules-extra	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-devel	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-devel-matched	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-modules	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-modules-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-64k-modules-extra	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-abi-stablelists	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-debug	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-debug-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-debug-devel	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-debug-devel-matched	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-debug-modules	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-debug-modules-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-debug-modules-extra	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-debug-uki-virt	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-devel	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-devel-matched	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-doc	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-modules	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-modules-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-modules-extra	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-debug	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-debug-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-debug-devel	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-debug-kvm	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-debug-modules	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-debug-modules-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-debug-modules-extra	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-devel	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-kvm	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-modules	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-modules-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-rt-modules-extra	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-tools	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-tools-libs	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-tools-libs-devel	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-uki-virt	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-zfcpdump	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-zfcpdump-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-zfcpdump-devel	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-zfcpdump-devel-matched	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-zfcpdump-modules	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-zfcpdump-modules-core	RHEL 9	0:5.14.0-427.33.1.el9_4
kernel-zfcpdump-modules-extra	RHEL 9	0:5.14.0-427.33.1.el9_4
libperf	RHEL 9	0:5.14.0-427.33.1.el9_4
perf	RHEL 9	0:5.14.0-427.33.1.el9_4
python3-perf	RHEL 9	0:5.14.0-427.33.1.el9_4
rtla	RHEL 9	0:5.14.0-427.33.1.el9_4
rv	RHEL 9	0:5.14.0-427.33.1.el9_4

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2024-26581	kernel-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...	7.8	0.0222	None reported
High	CVE-2024-42152	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0073	None reported
High	CVE-2024-40911	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0041	None reported
High	CVE-2024-40941	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0040	None reported
High	CVE-2024-40929	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0036	None reported
High	CVE-2024-40978	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0032	None reported
High	CVE-2024-41041	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0029	None reported
High	CVE-2024-38538	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.1	0.0028	None reported
High	CVE-2024-26925	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.0	0.0027	None reported
High	CVE-2024-40939	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0026	None reported
High	CVE-2024-41090	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0026	None reported
High	CVE-2024-41091	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0026	None reported
High	CVE-2024-38579	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0025	None reported
High	CVE-2024-26855	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0025	None reported
High	CVE-2024-26668	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.1	0.0024	None reported
High	CVE-2024-35896	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.1	0.0023	None reported
High	CVE-2024-40912	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0022	None reported
High	CVE-2024-27020	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.0	0.0022	None reported
High	CVE-2024-41076	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0021	None reported
High	CVE-2024-35898	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.0	0.0020	None reported
High	CVE-2024-26810	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bug...	7.8	0.0020	None reported
Routine	CVE-2024-40983	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	5.5	0.0088	None reported
Routine	CVE-2024-38544	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	6.3	0.0082	None reported
Routine	CVE-2024-40957	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	5.5	0.0073	None reported
Routine	CVE-2024-42110	net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()	5.5	0.0065	None reported

Also fixes CVE-2024-26581

ALAS2023-2024-549
bpftool, bpftool-debuginfo, kernel and 18 more on amzn 2023
ALSA-2024:5928
bpftool, kernel, kernel-64k and 59 more on almalinux 9
ELSA-2024-5928
bpftool, kernel, kernel-abi-stablelists and 26 more on ol 9
DEBIAN-CVE-2024-26581
linux on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14

Vendor advisory

https://access.redhat.com/errata/RHSA-2024:5928

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo