Linux · Security advisory · September 17, 2024

RXSA-2024:5101: kernel security update

RXSA-2024:5101, released September 17, 2024, fixes 160 CVEs in kernel (version 0:4.18.0-553.16.1.el8_10.cloud.0.1). One of them is being exploited (CVE-2024-36971); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
160
None rated Critical
Exploited
1
CVE-2024-36971
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0879
95th percentile

Priority of the 160 CVEs

Patch now 1 Urgent 0 High 54 Routine 105

Fixed package versions

ProductReleaseFixed in
kernelrocky 80:4.18.0-553.16.1.el8_10.cloud.0.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2024-36971 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0270 KEVExploited
High CVE-2021-47548 kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 9.8 0.0136 None reported
High CVE-2024-36886 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0131 None reported
High CVE-2023-52832 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 9.1 0.0126 None reported
High CVE-2024-38573 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.5 0.0100 None reported
High CVE-2024-36896 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 9.1 0.0092 None reported
High CVE-2022-48747 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.5 0.0092 None reported
High CVE-2023-52775 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0067 None reported
High CVE-2024-36904 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0061 None reported
High CVE-2024-36921 wifi: iwlwifi: mvm: guard against invalid STA ID on removal 7.8 0.0035 None reported
High CVE-2024-35937 wifi: cfg80211: check A-MSDU format more carefully 7.1 0.0034 None reported
High CVE-2023-52530 kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p... 7.8 0.0034 None reported
High CVE-2024-39502 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0031 None reported
High CVE-2024-40974 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p... 7.8 0.0030 None reported
High CVE-2023-52469 linux: In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse... 7.8 0.0029 None reported
High CVE-2024-40927 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0029 None reported
High CVE-2024-36960 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.1 0.0029 None reported
High CVE-2024-38538 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.1 0.0028 None reported
High CVE-2024-36978 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0028 None reported
High CVE-2024-26852 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p... 7.8 0.0027 None reported
High CVE-2023-52864 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0027 None reported
High CVE-2024-26704 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0027 None reported
High CVE-2024-26925 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.0 0.0027 None reported
High CVE-2024-26772 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0027 None reported
High CVE-2024-36016 linux: In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_r... 7.8 0.0027 None reported
Showing 1 to 25 of 160 1Next