RLSA-2024:10944

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

• kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook (CVE-2024-46695)

• kernel: net: avoid potential underflow in qdiscpktlen_init() with UFO (CVE-2024-49949)

• kernel: blk-rq-qos: fix crash on rqqoswait vs. rqqoswake_function race (CVE-2024-50082)

• kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099)

• kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110)

• kernel: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (CVE-2024-50142)

• kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192)

• kernel: netfilter: nfrejectipv6: fix potential crash in nfsendreset6() (CVE-2024-50256)

• kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (CVE-2024-50264)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.