Red Hat Product Errata RHSA-2024:3528 - Security Advisory
Issued:
2024-05-31
Updated:
2024-05-31

RHSA-2024:3528 - Security Advisory

Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: NULL pointer dereference in can_rcv_filter (CVE-2023-2166)
  • kernel: Slab-out-of-bound read in compare_netdev_and_ip (CVE-2023-2176)
  • kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function (CVE-2024-1086)
  • kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64

Fixes

  • BZ - 2187813 - CVE-2023-2166 kernel: NULL pointer dereference in can_rcv_filter
  • BZ - 2187931 - CVE-2023-2176 kernel: Slab-out-of-bound read in compare_netdev_and_ip
  • BZ - 2262126 - CVE-2024-1086 kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function
  • BZ - 2267758 - CVE-2023-52578 kernel: net: bridge: data races indata-races in br_handle_frame_finish()

Red Hat Enterprise Linux Server - AUS 8.2

SRPM
kernel-4.18.0-193.135.1.el8_2.src.rpm SHA-256: d2dfd81084e300969729a8b1e108e558ea1459950a154db8a41a306694c85ae7
x86_64
bpftool-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: 9b1f9278dc1f5f289bc17b61cb84efc2c2b7750f50d63fb109738d178f6f2624
bpftool-debuginfo-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: 2258d850f9f754a8be9dfbf28f2f094696b6e6836789c141e30de64b383cab5a
kernel-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: 58ead9899d2a8f3de0f2034fb7387a413f9aae040147515d262f9be6f03dfb53
kernel-abi-whitelists-4.18.0-193.135.1.el8_2.noarch.rpm SHA-256: a9bc769c1bac892ae372a9edb7aa651413501ce8405c4581f4fe8223541e84bb
kernel-core-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: e5414fc92e3930bbaa78babb2a0e49354123cff0ae6474d7e1d9804112df5654
kernel-cross-headers-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: ecfc05d02a48d8306288dc5933254807370bce7ce4845ae3559138513b7a73e2
kernel-debug-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: 45d12f1282aab6eccf0d48a939eaaa8f585b10df9d79ccfe91db3bb473ee0c9b
kernel-debug-core-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: 74d9395e5a3369e94d77021e81f95eebad47c6440b7ff334afdfc413f7bd025f
kernel-debug-debuginfo-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: 68ff43fa33079a4c6c51c6d24bf0477fbc0aa5970c12d5fd698df69ff40e2a76
kernel-debug-devel-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: bd1ea700fff6bd849335569b399469f253708a46eb2fbd6e57cf3afef07747e4
kernel-debug-modules-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: b563a1d4d2dc6382fd97ff2ac3a0a876384b8a2930bea7a5564d7fc2bde857c7
kernel-debug-modules-extra-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: be182376521d59deb8b64849b0d18aa667380e4f753c5504de402cd5a0e0c165
kernel-debuginfo-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: 8eb317415230ab1f21fb54aff9671ae6cacd3a1a226c271b75417933ba287521
kernel-debuginfo-common-x86_64-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: f42eb0d9b5208ba08c666755b50f4611967255b4a66340bafba389da123322ef
kernel-devel-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: 111116da62b1d7a0daba786221c77293619152209a2923617b94e138f46bcdd9
kernel-doc-4.18.0-193.135.1.el8_2.noarch.rpm SHA-256: f43159a9fdb3bf827c85ba41d329379f9ba9b01cbda1edb22c06f41520d7a181
kernel-headers-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: 885d3d766a85838ea7fd73c140cb40a993ee45be142c7ebe869012bf08970620
kernel-modules-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: e7fcefd8650b61eb12ec98b37390b5648b9894d3bac03a489d21b4ec5912048d
kernel-modules-extra-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: f08885467c7df8e849ac069e17b96ba70191f742abc80eec01f635c0a67aaba8
kernel-tools-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: e92067d8227e0678e2224169c59b73927b14b38ad671a23a48852f08c4c22938
kernel-tools-debuginfo-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: e9d9c287359f8bfca04791dace3e725c5cedaae772706cabcad33d55acf95b97
kernel-tools-libs-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: d0b2b9d37e6f2a291d9d926c733b3173811a2800f4c1ced30038715bc1ea41bc
perf-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: 3721bb1c07bc4f12805c522f98af3709de17bf788c0f63754109fcc73f5e540f
perf-debuginfo-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: 75f278bf28f0b0fccdac4a9dcf33d13f1148bb18275b66119413d5845d6224f2
python3-perf-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: f82ef7a7cb59792237ac51a3888468f8927a8968effc998eb68ecb5acfb46726
python3-perf-debuginfo-4.18.0-193.135.1.el8_2.x86_64.rpm SHA-256: f234493fa1a8b65e6a8d4a2456c981a86b60d2356b2d5d3c405274576cf20d25

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.