Linux · Security advisory · November 8, 2024
RLSA-2024:8870: kernel-rt security update
RLSA-2024:8870, released November 8, 2024, fixes 42 CVEs in kernel-rt (version 0:4.18.0-553.27.1.rt7.368.el8_10). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
42
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0092
60th percentile
Priority of the 42 CVEs
Patch now 0
Urgent 0
High 15
Routine 27
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-rt | rocky 8 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2024-42284 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0092 | None reported | |
| High | CVE-2024-38541 | linux: In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_moda... | 7.8 | 0.0090 | None reported | |
| High | CVE-2024-26924 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0085 | None reported | |
| High | CVE-2024-41042 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0032 | None reported | |
| High | CVE-2024-41092 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0027 | None reported | |
| High | CVE-2024-26976 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0026 | None reported | |
| High | CVE-2024-38586 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0025 | None reported | |
| High | CVE-2024-42292 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0025 | None reported | |
| High | CVE-2024-46826 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.0 | 0.0025 | None reported | |
| High | CVE-2024-44990 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.0 | 0.0024 | None reported | |
| High | CVE-2024-42301 | linux: In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk F... | 7.8 | 0.0023 | None reported | |
| High | CVE-2024-35939 | dma-direct: Leak pages on dma_set_decrypted() failure | 7.1 | 0.0022 | None reported | |
| High | CVE-2024-39503 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.0 | 0.0022 | None reported | |
| High | CVE-2024-35898 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0020 | None reported | |
| High | CVE-2024-27062 | nouveau: lock the client object tree. | 7.8 | 0.0018 | None reported | |
| Routine | CVE-2024-40983 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0088 | None reported | |
| Routine | CVE-2024-26851 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0074 | None reported | |
| Routine | CVE-2024-41066 | ibmvnic: Add tx check to prevent skb leak | 6.4 | 0.0053 | None reported | |
| Routine | CVE-2024-24857 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 6.8 | 0.0032 | None reported | |
| Routine | CVE-2024-40924 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0030 | None reported | |
| Routine | CVE-2024-40984 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0030 | None reported | |
| Routine | CVE-2024-27017 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0029 | None reported | |
| Routine | CVE-2024-42070 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0028 | None reported | |
| Routine | CVE-2024-41009 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0027 | None reported | |
| Routine | CVE-2023-52492 | kernel-azure: The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following securi... | 4.4 | 0.0027 | None reported |
Showing 1 to 25 of 42
1Next