Linux · Security advisory · November 12, 2024

RHSA-2024:9315: Security update for 63 packages

RHSA-2024:9315, released November 12, 2024, fixes 594 CVEs across 63 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

594

1 rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0239

84th percentile

Priority of the 594 CVEs

Patch now 0
                                Urgent 1
                                High 214
                                Routine 379

Fixed package versions

Product	Release	Fixed in
bpftool	RHEL 9	0:7.4.0-503.11.1.el9_5
kernel	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-debug	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-debug-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-debug-devel	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-debug-devel-matched	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-debug-modules	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-debug-modules-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-debug-modules-extra	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-devel	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-devel-matched	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-modules	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-modules-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-64k-modules-extra	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-abi-stablelists	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-debug	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-debug-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-debug-devel	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-debug-devel-matched	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-debug-modules	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-debug-modules-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-debug-modules-extra	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-debug-uki-virt	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-devel	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-devel-matched	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-doc	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-modules	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-modules-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-modules-extra	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-debug	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-debug-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-debug-devel	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-debug-kvm	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-debug-modules	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-debug-modules-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-debug-modules-extra	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-devel	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-kvm	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-modules	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-modules-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-rt-modules-extra	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-tools	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-tools-libs	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-tools-libs-devel	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-uki-virt	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-uki-virt-addons	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-zfcpdump	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-devel	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-devel-matched	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-modules	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-modules-core	RHEL 9	0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-modules-extra	RHEL 9	0:5.14.0-503.11.1.el9_5
libperf	RHEL 9	0:5.14.0-503.11.1.el9_5
perf	RHEL 9	0:5.14.0-503.11.1.el9_5
python3-perf	RHEL 9	0:5.14.0-503.11.1.el9_5
rtla	RHEL 9	0:5.14.0-503.11.1.el9_5
rv	RHEL 9	0:5.14.0-503.11.1.el9_5

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2024-35869	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	9.8	0.0065	None reported
High	CVE-2021-47384	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0103	None reported
High	CVE-2024-36896	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	9.1	0.0092	None reported
High	CVE-2024-26924	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0085	None reported
High	CVE-2023-52696	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.5	0.0082	None reported
High	CVE-2024-41007	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0077	None reported
High	CVE-2024-38605	linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment a...	7.8	0.0075	None reported
High	CVE-2024-36031	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	9.8	0.0075	None reported
High	CVE-2024-35853	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.0	0.0073	None reported
High	CVE-2024-26782	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0072	None reported
High	CVE-2024-26882	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0070	None reported
High	CVE-2023-52775	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0067	None reported
High	CVE-2024-35861	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0066	None reported
High	CVE-2024-35862	smb: client: fix potential UAF in smb2_is_network_name_deleted()	7.8	0.0066	None reported
High	CVE-2024-35863	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0066	None reported
High	CVE-2024-35864	smb: client: fix potential UAF in smb2_is_valid_lease_break()	7.8	0.0066	None reported
High	CVE-2024-38612	linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The...	7.0	0.0066	None reported
High	CVE-2024-35865	smb: client: fix potential UAF in smb2_is_valid_oplock_break()	9.8	0.0063	None reported
High	CVE-2024-35835	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0063	None reported
High	CVE-2024-26857	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.3	0.0061	None reported
High	CVE-2024-35888	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.3	0.0061	None reported
High	CVE-2024-26890	linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: fix out of bounds memory acces...	7.8	0.0061	None reported
High	CVE-2024-23307	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: M...	7.8	0.0059	None reported
High	CVE-2024-35854	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0058	None reported
High	CVE-2024-44970	net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink	7.8	0.0056	None reported

Also fixes CVE-2024-35869

ELSA-2024-9315
bpftool, kernel, kernel-abi-stablelists and 27 more on ol 9
SUSE-SU-2024:2135-1
kernel-azure, kernel-source-azure, kernel-syms-azure on opensuse-leap 15.6, sles 15.6
SUSE-SU-2024:2203-1
dtb-aarch64, kernel-64kb, kernel-debug and 10 more on opensuse-leap 15.6, sles 15.6
DEBIAN-CVE-2024-35869
linux on Debian 13.5 (trixie), Debian 14

Vendor advisory

https://access.redhat.com/errata/RHSA-2024:9315

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo