Linux · Security advisory · April 5, 2024

RLSA-2024:1614: kernel-rt security update

RLSA-2024:1614, released April 5, 2024, fixes 7 CVEs in kernel-rt (version 0:4.18.0-513.24.1.rt7.326.el8_9). One of them is being exploited (CVE-2024-1086); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use
CVEs closed
7
None rated Critical
Exploited
1
CVE-2024-1086
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2806
98th percentile

Priority of the 7 CVEs

Patch now 1 Urgent 0 High 5 Routine 1

Fixed package versions

ProductReleaseFixed in
kernel-rtrocky 80:4.18.0-513.24.1.rt7.326.el8_9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2024-1086 linux: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local... 7.8 0.2806 KEVRansomwareExploited
High CVE-2024-0565 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... 7.4 0.0200 None reported
High CVE-2023-6546 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... 7.0 0.0074 None reported
High CVE-2023-6931 linux: A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited t... 7.0 0.0072 None reported
High CVE-2021-33631 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... 7.8 0.0037 None reported
High CVE-2023-51042 linux: In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence us... 7.8 0.0032 None reported
Routine CVE-2022-38096 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... 5.5 0.0080 None reported
Showing 1 to 7 of 7 1