ALSA-2024:8617
- Source
- https://errata.almalinux.org/9/ALSA-2024-8617.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:8617.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2024:8617
- Related
- Published
- 2024-10-30T00:00:00Z
- Modified
- 2024-11-03T19:17:28Z
- Summary
- Moderate: kernel security update
- Details
-
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201)
- kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
- kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
- kernel: af_unix: Fix garbage collector racing against connect() (CVE-2024-26923)
- kernel: mac802154: fix llsec key resources release in mac802154llseckey_del (CVE-2024-26961)
- kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935)
- kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383)
- kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too (CVE-2024-36244)
- kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472)
- kernel: netfilter: nft_inner: validate mandatory meta and payload (CVE-2024-39504)
- kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CVE-2024-40904)
- kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931)
- kernel: ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960)
- kernel: ext4: do not create EA inode under buffer lock (CVE-2024-40972)
- kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CVE-2024-40977)
- kernel: net/sched: actapi: fix possible infinite loop in tcfidrcheckalloc() (CVE-2024-40995)
- kernel: ext4: fix uninitialized ratelimitstate->lock access in _ext4fillsuper() (CVE-2024-40998)
- kernel: netpoll: Fix race condition in netpollowneractive (CVE-2024-41005)
- kernel: xfs: don't walk off the end of a directory data block (CVE-2024-41013)
- kernel: xfs: add bounds checking to xlogrecoverprocess_data (CVE-2024-41014)
- kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)
- kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2024:8617
- https://access.redhat.com/security/cve/CVE-2021-47383
- https://access.redhat.com/security/cve/CVE-2024-2201
- https://access.redhat.com/security/cve/CVE-2024-26640
- https://access.redhat.com/security/cve/CVE-2024-26826
- https://access.redhat.com/security/cve/CVE-2024-26923
- https://access.redhat.com/security/cve/CVE-2024-26935
- https://access.redhat.com/security/cve/CVE-2024-26961
- https://access.redhat.com/security/cve/CVE-2024-36244
- https://access.redhat.com/security/cve/CVE-2024-39472
- https://access.redhat.com/security/cve/CVE-2024-39504
- https://access.redhat.com/security/cve/CVE-2024-40904
- https://access.redhat.com/security/cve/CVE-2024-40931
- https://access.redhat.com/security/cve/CVE-2024-40960
- https://access.redhat.com/security/cve/CVE-2024-40972
- https://access.redhat.com/security/cve/CVE-2024-40977
- https://access.redhat.com/security/cve/CVE-2024-40995
- https://access.redhat.com/security/cve/CVE-2024-40998
- https://access.redhat.com/security/cve/CVE-2024-41005
- https://access.redhat.com/security/cve/CVE-2024-41013
- https://access.redhat.com/security/cve/CVE-2024-41014
- https://access.redhat.com/security/cve/CVE-2024-43854
- https://access.redhat.com/security/cve/CVE-2024-45018
- https://bugzilla.redhat.com/2268118
- https://bugzilla.redhat.com/2270100
- https://bugzilla.redhat.com/2275604
- https://bugzilla.redhat.com/2277171
- https://bugzilla.redhat.com/2278176
- https://bugzilla.redhat.com/2278235
- https://bugzilla.redhat.com/2282357
- https://bugzilla.redhat.com/2293654
- https://bugzilla.redhat.com/2296067
- https://bugzilla.redhat.com/2297476
- https://bugzilla.redhat.com/2297488
- https://bugzilla.redhat.com/2297515
- https://bugzilla.redhat.com/2297544
- https://bugzilla.redhat.com/2297556
- https://bugzilla.redhat.com/2297561
- https://bugzilla.redhat.com/2297579
- https://bugzilla.redhat.com/2297582
- https://bugzilla.redhat.com/2297589
- https://bugzilla.redhat.com/2300296
- https://bugzilla.redhat.com/2300297
- https://bugzilla.redhat.com/2311715
- https://errata.almalinux.org/9/ALSA-2024-8617.html
Affected packages
AlmaLinux:9 / bpftool
Package
- Name
- bpftool
AlmaLinux:9 / kernel
Package
- Name
- kernel
AlmaLinux:9 / kernel-64k
Package
- Name
- kernel-64k
AlmaLinux:9 / kernel-64k-core
Package
- Name
- kernel-64k-core
AlmaLinux:9 / kernel-64k-debug
Package
- Name
- kernel-64k-debug
AlmaLinux:9 / kernel-64k-debug-core
Package
- Name
- kernel-64k-debug-core
AlmaLinux:9 / kernel-64k-debug-devel
Package
- Name
- kernel-64k-debug-devel
AlmaLinux:9 / kernel-64k-debug-devel-matched
Package
- Name
- kernel-64k-debug-devel-matched
AlmaLinux:9 / kernel-64k-debug-modules
Package
- Name
- kernel-64k-debug-modules
AlmaLinux:9 / kernel-64k-debug-modules-core
Package
- Name
- kernel-64k-debug-modules-core
AlmaLinux:9 / kernel-64k-debug-modules-extra
Package
- Name
- kernel-64k-debug-modules-extra
AlmaLinux:9 / kernel-64k-devel
Package
- Name
- kernel-64k-devel
AlmaLinux:9 / kernel-64k-devel-matched
Package
- Name
- kernel-64k-devel-matched
AlmaLinux:9 / kernel-64k-modules
Package
- Name
- kernel-64k-modules
AlmaLinux:9 / kernel-64k-modules-core
Package
- Name
- kernel-64k-modules-core
AlmaLinux:9 / kernel-64k-modules-extra
Package
- Name
- kernel-64k-modules-extra
AlmaLinux:9 / kernel-abi-stablelists
Package
- Name
- kernel-abi-stablelists
AlmaLinux:9 / kernel-core
Package
- Name
- kernel-core
AlmaLinux:9 / kernel-cross-headers
Package
- Name
- kernel-cross-headers
AlmaLinux:9 / kernel-debug
Package
- Name
- kernel-debug
AlmaLinux:9 / kernel-debug-core
Package
- Name
- kernel-debug-core
AlmaLinux:9 / kernel-debug-devel
Package
- Name
- kernel-debug-devel
AlmaLinux:9 / kernel-debug-devel-matched
Package
- Name
- kernel-debug-devel-matched
AlmaLinux:9 / kernel-debug-modules
Package
- Name
- kernel-debug-modules
AlmaLinux:9 / kernel-debug-modules-core
Package
- Name
- kernel-debug-modules-core
AlmaLinux:9 / kernel-debug-modules-extra
Package
- Name
- kernel-debug-modules-extra
AlmaLinux:9 / kernel-debug-uki-virt
Package
- Name
- kernel-debug-uki-virt
AlmaLinux:9 / kernel-devel
Package
- Name
- kernel-devel
AlmaLinux:9 / kernel-devel-matched
Package
- Name
- kernel-devel-matched
AlmaLinux:9 / kernel-doc
Package
- Name
- kernel-doc
AlmaLinux:9 / kernel-headers
Package
- Name
- kernel-headers
AlmaLinux:9 / kernel-modules
Package
- Name
- kernel-modules
AlmaLinux:9 / kernel-modules-core
Package
- Name
- kernel-modules-core
AlmaLinux:9 / kernel-modules-extra
Package
- Name
- kernel-modules-extra
AlmaLinux:9 / kernel-rt
Package
- Name
- kernel-rt
AlmaLinux:9 / kernel-rt-core
Package
- Name
- kernel-rt-core
AlmaLinux:9 / kernel-rt-debug
Package
- Name
- kernel-rt-debug
AlmaLinux:9 / kernel-rt-debug-core
Package
- Name
- kernel-rt-debug-core
AlmaLinux:9 / kernel-rt-debug-devel
Package
- Name
- kernel-rt-debug-devel
AlmaLinux:9 / kernel-rt-debug-modules
Package
- Name
- kernel-rt-debug-modules
AlmaLinux:9 / kernel-rt-debug-modules-core
Package
- Name
- kernel-rt-debug-modules-core
AlmaLinux:9 / kernel-rt-debug-modules-extra
Package
- Name
- kernel-rt-debug-modules-extra
AlmaLinux:9 / kernel-rt-devel
Package
- Name
- kernel-rt-devel
AlmaLinux:9 / kernel-rt-modules
Package
- Name
- kernel-rt-modules
AlmaLinux:9 / kernel-rt-modules-core
Package
- Name
- kernel-rt-modules-core
AlmaLinux:9 / kernel-rt-modules-extra
Package
- Name
- kernel-rt-modules-extra
AlmaLinux:9 / kernel-tools
Package
- Name
- kernel-tools
AlmaLinux:9 / kernel-tools-libs
Package
- Name
- kernel-tools-libs
AlmaLinux:9 / kernel-tools-libs-devel
Package
- Name
- kernel-tools-libs-devel
AlmaLinux:9 / kernel-uki-virt
Package
- Name
- kernel-uki-virt
AlmaLinux:9 / kernel-zfcpdump
Package
- Name
- kernel-zfcpdump
AlmaLinux:9 / kernel-zfcpdump-core
Package
- Name
- kernel-zfcpdump-core
AlmaLinux:9 / kernel-zfcpdump-devel
Package
- Name
- kernel-zfcpdump-devel
AlmaLinux:9 / kernel-zfcpdump-devel-matched
Package
- Name
- kernel-zfcpdump-devel-matched
AlmaLinux:9 / kernel-zfcpdump-modules
Package
- Name
- kernel-zfcpdump-modules
AlmaLinux:9 / kernel-zfcpdump-modules-core
Package
- Name
- kernel-zfcpdump-modules-core
AlmaLinux:9 / kernel-zfcpdump-modules-extra
Package
- Name
- kernel-zfcpdump-modules-extra
AlmaLinux:9 / libperf
Package
- Name
- libperf
AlmaLinux:9 / perf
Package
- Name
- perf
AlmaLinux:9 / python3-perf
Package
- Name
- python3-perf
AlmaLinux:9 / rtla
Package
- Name
- rtla