{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for kernel-rt is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query (CVE-2022-38096)\n\n* kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (CVE-2023-6931)\n\n* kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546,ZDI-CAN-20527)\n\n* kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (CVE-2024-0565)\n\n* kernel: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (CVE-2023-51042)\n\n* kernel: ext4: kernel bug in ext4_write_inline_data_end() (CVE-2021-33631)\n\n* kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function (CVE-2024-1086)\n\nBug Fix(es):\n\n* kernel-rt: update RT source tree to the latest RHEL-8.9.z3 Batch (JIRA:RHEL-23853)\n\n* kernel-rt: kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function (JIRA:RHEL-24015)\n\n* kernel-rt: kernel: vmxgfx: NULL pointer dereference in vmw_cmd_dx_define_query (JIRA:RHEL-22758)\n\n* kernel-rt: kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (JIRA:RHEL-22080)\n\n* kernel-rt: kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (JIRA:RHEL-22933)\n\n* kernel-rt: kernel: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (JIRA:RHEL-24498)\n\n* kernel-rt: kernel: GSM multiplexing race condition leads to privilege escalation (JIRA:RHEL-19966)\n\n* kernel-rt: kernel: ext4: kernel bug in ext4_write_inline_data_end() (JIRA:RHEL-26334)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:1614", "url": "https://access.redhat.com/errata/RHSA-2024:1614" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2133452", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2133452" }, { "category": "external", "summary": "2252731", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2252731" }, { "category": "external", "summary": "2255498", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255498" }, { "category": "external", "summary": "2258518", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258518" }, { "category": "external", "summary": "2259866", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259866" }, { "category": "external", "summary": "2261976", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261976" }, { "category": "external", "summary": "2262126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2262126" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1614.json" } ], "title": "Red Hat Security Advisory: kernel-rt security and bug fix update", "tracking": { "current_release_date": "2026-06-28T12:42:57+00:00", "generator": { "date": "2026-06-28T12:42:57+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.2.6" } }, "id": "RHSA-2024:1614", "initial_release_date": "2024-04-02T17:26:48+00:00", "revision_history": [ { "date": "2024-04-02T17:26:48+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-04-02T17:26:48+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-06-28T12:42:57+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product": { "name": "Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::nfv" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux for Real Time (v. 8)", "product": { "name": "Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::realtime" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "product": { "name": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "product_id": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt@4.18.0-513.24.1.rt7.326.el8_9?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-core@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-core@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-devel@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-kvm@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-modules@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-modules-extra@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-devel@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-kvm@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-modules@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-modules-extra@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debuginfo@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product": { "name": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_id": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@4.18.0-513.24.1.rt7.326.el8_9?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src" }, "product_reference": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 8)", "product_id": "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "NFV-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src" }, "product_reference": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 8)", "product_id": "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" }, "product_reference": "kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "relates_to_product_reference": "RT-8.9.0.Z.MAIN" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-33631", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2024-01-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2261976" } ], "notes": [ { "category": "description", "text": "A flaw was found in the openEuler kernel in Linux filesystem modules that allows an integer overflow via mounting a corrupted filesystem. This issue affects the openEuler kernel in versions from 4.19.90 through 4.19.90-2401.3 and 5.10.0-60.18.0 through 5.10.0-183.0.0.", "title": "Vulnerability description" }, { "category": "summary", "text": "kernel: ext4: kernel bug in ext4_write_inline_data_end()", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat has protection mechanisms in place against buffer overflows, such as FORTIFY_SOURCE, Position Independent Executables or Stack Smashing Protection.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-33631" }, { "category": "external", "summary": "RHBZ#2261976", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261976" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-33631", "url": "https://www.cve.org/CVERecord?id=CVE-2021-33631" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-33631", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33631" }, { "category": "external", "summary": "https://seclists.org/oss-sec/2024/q1/65", "url": "https://seclists.org/oss-sec/2024/q1/65" } ], "release_date": "2024-01-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T17:26:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1614" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "kernel: ext4: kernel bug in ext4_write_inline_data_end()" }, { "cve": "CVE-2022-38096", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2022-09-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2133452" } ], "notes": [ { "category": "description", "text": "A NULL pointer dereference issue was found in the Linux kernel's vmwgfx driver in vmw_cmd_dx_define_query. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, who can issue an ioctl() on the resulting file descriptor, to crash the system, causing a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query", "title": "Vulnerability summary" }, { "category": "other", "text": "Systems making use of the vmwgfx driver are potentially affected by this flaw; systems without the vmwgfx driver loaded are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-38096" }, { "category": "external", "summary": "RHBZ#2133452", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2133452" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-38096", "url": "https://www.cve.org/CVERecord?id=CVE-2022-38096" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-38096", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38096" } ], "release_date": "2022-09-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T17:26:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1614" }, { "category": "workaround", "details": "To mitigate this issue, it is possible to prevent the affected code from being loaded by blacklisting the vmwgfx kernel module. For instructions relating to blacklisting a kernel module, please see https://access.redhat.com/solutions/41278.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query" }, { "cve": "CVE-2023-6546", "cwe": { "id": "CWE-366", "name": "Race Condition within a Thread" }, "discovery_date": "2023-12-18T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2255498" } ], "notes": [ { "category": "description", "text": "A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.", "title": "Vulnerability description" }, { "category": "summary", "text": "kernel: GSM multiplexing race condition leads to privilege escalation", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is critical because it can be exploited to escalate privileges, directly threatening system security. Despite requiring local access and having a high attack complexity, the potential to severely impact confidentiality, integrity, and availability justifies its \"Important\" rating.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-6546" }, { "category": "external", "summary": "RHBZ#2255498", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255498" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-6546", "url": "https://www.cve.org/CVERecord?id=CVE-2023-6546" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-6546", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6546" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e3", "url": "https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e3" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527", "url": "https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527" } ], "release_date": "2023-12-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T17:26:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1614" }, { "category": "workaround", "details": "This flaw can be mitigated by preventing the affected `n_gsm` kernel module from being loaded. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "kernel: GSM multiplexing race condition leads to privilege escalation" }, { "cve": "CVE-2023-6931", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2023-11-24T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2252731" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Linux kernel's Performance Events system component. A condition can be triggered that allows data to be written past the end or before the beginning of the intended memory buffer. This may lead to a system crash, code execution, or local privilege escalation.", "title": "Vulnerability description" }, { "category": "summary", "text": "kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-6931" }, { "category": "external", "summary": "RHBZ#2252731", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2252731" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-6931", "url": "https://www.cve.org/CVERecord?id=CVE-2023-6931" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-6931", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6931" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b" } ], "release_date": "2023-11-29T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T17:26:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1614" }, { "category": "workaround", "details": "It is not possible to trigger this issue with the default kernel.perf_event_paranoid sysctl value 2. You may check it with:\ncat /proc/sys/kernel/perf_event_paranoid", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size" }, { "cve": "CVE-2023-51042", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2024-01-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2259866" } ], "notes": [ { "category": "description", "text": "A use-after-free flaw was found in the Linux kernel's AMD GPU driver which may allow access to members of a synchronization structure after the structure is freed. This issue could allow a local user to crash the system or to access confidential system memory.", "title": "Vulnerability description" }, { "category": "summary", "text": "kernel: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue is only applicable to the amdgpu module, which is typically only loaded on systems that use AMD GPU hardware. Use the `lsmod` command to determine whether the amdgpu module is loaded.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-51042" }, { "category": "external", "summary": "RHBZ#2259866", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259866" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-51042", "url": "https://www.cve.org/CVERecord?id=CVE-2023-51042" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-51042", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51042" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/2e54154b9f27262efd0cb4f903cc7d5ad1fe9628", "url": "https://github.com/torvalds/linux/commit/2e54154b9f27262efd0cb4f903cc7d5ad1fe9628" } ], "release_date": "2024-01-23T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T17:26:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1614" }, { "category": "workaround", "details": "To mitigate this issue, prevent the amdgpu module from loading. Please see https://access.redhat.com/solutions/41278 for more information on how to prevent kernel modules from loading. Note that if a system has an AMD GPU, this may make certain features of that GPU unavailable.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "kernel: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c" }, { "cve": "CVE-2024-0565", "cwe": { "id": "CWE-191", "name": "Integer Underflow (Wrap or Wraparound)" }, "discovery_date": "2024-01-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2258518" } ], "notes": [ { "category": "description", "text": "An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability considered being Moderate impact because of limitations for attack scenario.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-0565" }, { "category": "external", "summary": "RHBZ#2258518", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258518" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-0565", "url": "https://www.cve.org/CVERecord?id=CVE-2024-0565" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0565", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0565" }, { "category": "external", "summary": "https://www.spinics.net/lists/stable-commits/msg328851.html", "url": "https://www.spinics.net/lists/stable-commits/msg328851.html" } ], "release_date": "2023-12-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T17:26:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1614" }, { "category": "workaround", "details": "To mitigate this issue, prevent module cifs from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client" }, { "cve": "CVE-2024-1086", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2024-01-31T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2262126" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Netfilter subsystem in the Linux kernel. This issue occurs in the nft_verdict_init() function, allowing positive values as a drop error within the hook verdict, therefore, the nf_hook_slow() function can cause a double-free vulnerability when NF_DROP is issued with a drop error that resembles NF_ACCEPT. The nf_tables component can be exploited to achieve local privilege escalation.", "title": "Vulnerability description" }, { "category": "summary", "text": "kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw is rated as having an Important impact. There is the limitation that it can only be exploited by a local user with access to Netfilter, but can still allow privilege escalation if user namespaces are enabled and Netfilter is being used.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-1086" }, { "category": "external", "summary": "RHBZ#2262126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2262126" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-1086", "url": "https://www.cve.org/CVERecord?id=CVE-2024-1086" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1086", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1086" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660" }, { "category": "external", "summary": "https://kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660", "url": "https://kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" } ], "release_date": "2024-01-31T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T17:26:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1614" }, { "category": "workaround", "details": "1. This flaw can be mitigated by preventing the affected netfilter (nf_tables) kernel module from being loaded. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278.\n\n2. If the module cannot be disabled, on non-containerized deployments of Red Hat Enterprise Linux, the mitigation is to disable user namespaces:\n```\n# echo \"user.max_user_namespaces=0\" > /etc/sysctl.d/userns.conf\n# sysctl -p /etc/sysctl.d/userns.conf\n```\nOn containerized deployments, such as Red Hat OpenShift Container Platform, do not use the second mitigation (disabling user namespaces) as the functionality is needed to be enabled. The first mitigation (blacklisting nf_tables) is still viable for containerized deployments, providing the environment is not using netfilter.", "product_ids": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "NFV-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-kvm-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "NFV-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.src", "RT-8.9.0.Z.MAIN:kernel-rt-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-core-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debug-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-debuginfo-common-x86_64-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-devel-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64", "RT-8.9.0.Z.MAIN:kernel-rt-modules-extra-0:4.18.0-513.24.1.rt7.326.el8_9.x86_64" ] } ], "threats": [ { "category": "exploit_status", "date": "2024-05-30T00:00:00+00:00", "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "category": "impact", "details": "Important" } ], "title": "kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function" } ] }