Linux · Security advisory · October 16, 2024

RHSA-2024:8162: Security update for 62 packages

RHSA-2024:8162, released October 16, 2024, fixes 14 CVEs across 62 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
14
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0092
60th percentile

Priority of the 14 CVEs

Patch now 0 Urgent 0 High 7 Routine 7

Fixed package versions

ProductReleaseFixed in
bpftoolRHEL 90:7.3.0-427.40.1.el9_4
kernelRHEL 90:5.14.0-427.40.1.el9_4
kernel-64kRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-debugRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-debug-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-debug-develRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-debug-devel-matchedRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-debug-modulesRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-debug-modules-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-debug-modules-extraRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-develRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-devel-matchedRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-modulesRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-modules-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-64k-modules-extraRHEL 90:5.14.0-427.40.1.el9_4
kernel-abi-stablelistsRHEL 90:5.14.0-427.40.1.el9_4
kernel-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-debugRHEL 90:5.14.0-427.40.1.el9_4
kernel-debug-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-debug-develRHEL 90:5.14.0-427.40.1.el9_4
kernel-debug-devel-matchedRHEL 90:5.14.0-427.40.1.el9_4
kernel-debug-modulesRHEL 90:5.14.0-427.40.1.el9_4
kernel-debug-modules-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-debug-modules-extraRHEL 90:5.14.0-427.40.1.el9_4
kernel-debug-uki-virtRHEL 90:5.14.0-427.40.1.el9_4
kernel-develRHEL 90:5.14.0-427.40.1.el9_4
kernel-devel-matchedRHEL 90:5.14.0-427.40.1.el9_4
kernel-docRHEL 90:5.14.0-427.40.1.el9_4
kernel-modulesRHEL 90:5.14.0-427.40.1.el9_4
kernel-modules-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-modules-extraRHEL 90:5.14.0-427.40.1.el9_4
kernel-rtRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-debugRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-debug-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-debug-develRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-debug-kvmRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-debug-modulesRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-debug-modules-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-debug-modules-extraRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-develRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-kvmRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-modulesRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-modules-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-rt-modules-extraRHEL 90:5.14.0-427.40.1.el9_4
kernel-toolsRHEL 90:5.14.0-427.40.1.el9_4
kernel-tools-libsRHEL 90:5.14.0-427.40.1.el9_4
kernel-tools-libs-develRHEL 90:5.14.0-427.40.1.el9_4
kernel-uki-virtRHEL 90:5.14.0-427.40.1.el9_4
kernel-zfcpdumpRHEL 90:5.14.0-427.40.1.el9_4
kernel-zfcpdump-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-zfcpdump-develRHEL 90:5.14.0-427.40.1.el9_4
kernel-zfcpdump-devel-matchedRHEL 90:5.14.0-427.40.1.el9_4
kernel-zfcpdump-modulesRHEL 90:5.14.0-427.40.1.el9_4
kernel-zfcpdump-modules-coreRHEL 90:5.14.0-427.40.1.el9_4
kernel-zfcpdump-modules-extraRHEL 90:5.14.0-427.40.1.el9_4
libperfRHEL 90:5.14.0-427.40.1.el9_4
perfRHEL 90:5.14.0-427.40.1.el9_4
python3-perfRHEL 90:5.14.0-427.40.1.el9_4
rtlaRHEL 90:5.14.0-427.40.1.el9_4
rvRHEL 90:5.14.0-427.40.1.el9_4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-42284 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0092 None reported
High CVE-2024-39502 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0031 None reported
High CVE-2024-36978 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0028 None reported
High CVE-2024-40959 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0028 None reported
High CVE-2024-38556 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0026 None reported
High CVE-2021-47385 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0024 None reported
High CVE-2024-35989 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0021 None reported
Routine CVE-2023-28746 Intel: CVE-2023-28746 Register File Data Sampling (RFDS) 6.5 0.0055 Exploitation Less Likely
Routine CVE-2024-42079 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 5.5 0.0027 None reported
Routine CVE-2024-36889 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 5.5 0.0027 None reported
Routine CVE-2023-52658 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 5.5 0.0026 None reported
Routine CVE-2024-42272 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... 5.5 0.0024 None reported
Routine CVE-2024-27403 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 5.5 0.0024 None reported
Routine CVE-2024-39483 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 5.5 0.0023 None reported
Showing 1 to 14 of 14 1