Linux · Security advisory · September 30, 2024

RLSA-2024:7001: kernel-rt security update

RLSA-2024:7001, released September 30, 2024, fixes 129 CVEs in kernel-rt (version 0:4.18.0-553.22.1.rt7.363.el8_10). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

129

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0103

63rd percentile

Priority of the 129 CVEs

Patch now 0
                                Urgent 0
                                High 129
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel-rt	rocky 8	0:4.18.0-553.22.1.rt7.363.el8_10

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2021-47384	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0103	None reported
High	CVE-2024-41040	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0100	None reported
High	CVE-2024-38558	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0082	None reported
High	CVE-2024-41007	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0077	None reported
High	CVE-2024-42152	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0073	None reported
High	CVE-2024-26880	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0072	None reported
High	CVE-2024-35884	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0069	None reported
High	CVE-2024-26665	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0068	None reported
High	CVE-2024-38570	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0068	None reported
High	CVE-2024-26769	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0064	None reported
High	CVE-2024-40911	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0041	None reported
High	CVE-2024-40941	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0040	None reported
High	CVE-2021-47097	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0040	None reported
High	CVE-2024-40929	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0036	None reported
High	CVE-2023-52522	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0034	None reported
High	CVE-2024-40978	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0032	None reported
High	CVE-2024-40901	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0031	None reported
High	CVE-2024-36883	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0031	None reported
High	CVE-2024-41038	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0031	None reported
High	CVE-2023-6040	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0031	None reported
High	CVE-2022-48804	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0031	None reported
High	CVE-2024-40989	KVM: arm64: Disassociate vcpus from redistributor region on teardown	7.8	0.0030	None reported
High	CVE-2024-41035	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0030	None reported
High	CVE-2024-39499	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0030	None reported
High	CVE-2023-52470	linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: check the alloc_workqueue return val...	7.8	0.0029	None reported

Also fixes CVE-2021-47384

RHSA-2024:9315
bpftool, kernel, kernel-64k and 60 more on RHEL 9
ELSA-2024-9315
bpftool, kernel, kernel-abi-stablelists and 27 more on ol 9
RHSA-2024:7000
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RLSA-2024:7000
kernel on rocky 8
ALSA-2024:7000
bpftool, kernel, kernel-abi-stablelists and 22 more on almalinux 8
ELSA-2024-7000
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
ALSA-2024:7001
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on almalinux 8
RHSA-2024:7001
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8

Vendor advisory

https://errata.rockylinux.org/RLSA-2024:7001

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo