CVE-2024-57823
Severity: important
Released on: 10/01/2025
Advisory:
Bugzilla: 2336921
Bugzilla Description: raptor: integer underflow when normalizing a URI with the turtle parser
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-191
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57822
Severity: moderate
Released on: 10/01/2025
Advisory:
Bugzilla: 2336922
Bugzilla Description: raptor: heap-based buffer over-read vulnerability
CVSS Score:
CVSSv3 Score: 4.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-23022
Severity: moderate
Released on: 10/01/2025
Advisory:
Bugzilla: 2336955
Bugzilla Description: freetype: signed integer overflow in cf2_doFlex
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat build of OpenJDK 11,Red Hat build of OpenJDK 17,Red Hat build of OpenJDK 21,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2025-22445
Severity: low
Released on: 09/01/2025
Advisory:
Bugzilla: 2336671
Bugzilla Description: mattermost: Misleading UI for undefined admin console settings in Calls causes security confusion
CVSS Score:
CVSSv3 Score: 3.5
Vector:
CWE: CWE-754
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Ceph Storage 5,Red Hat Ceph Storage 6,Red Hat Ceph Storage 8,Red Hat OpenShift GitOps,
Full Details
CVE document

CVE-2025-20033
Severity: moderate
Released on: 09/01/2025
Advisory:
Bugzilla: 2336629
Bugzilla Description: mattermost: DoS via custom post type for sysconsole plugin readers
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1287
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Ceph Storage 5,Red Hat Ceph Storage 6,Red Hat Ceph Storage 8,Red Hat OpenShift GitOps,
Full Details
CVE document

CVE-2025-22449
Severity: low
Released on: 09/01/2025
Advisory:
Bugzilla: 2336638
Bugzilla Description: mattermost: Access control flaw for team admins allows unauthorized team additions
CVSS Score:
CVSSv3 Score: 3.8
Vector:
CWE: CWE-863
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Ceph Storage 5,Red Hat Ceph Storage 6,Red Hat Ceph Storage 8,Red Hat OpenShift GitOps,
Full Details
CVE document

CVE-2024-37372
Severity: low
Released on: 09/01/2025
Advisory:
Bugzilla: 2336663
Bugzilla Description: nodejs: Permission model improperly processes UNC paths
CVSS Score:
CVSSv3 Score: 3.6
Vector:
CWE: CWE-754
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2024-55459
Severity: moderate
Released on: 08/01/2025
Advisory:
Bugzilla: 2336426
Bugzilla Description: keras: arbitrary file write via get_file function
CVSS Score:
CVSSv3 Score: 5.7
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2024-56770
Severity: moderate
Released on: 08/01/2025
Advisory:
Bugzilla: 2336429
Bugzilla Description: kernel: net/sched: netem: account for backlog updates from child qdisc
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56787
Severity: low
Released on: 08/01/2025
Advisory:
Bugzilla: 2336540
Bugzilla Description: kernel: soc: imx8m: Probe the SoC driver as platform driver
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56786
Severity: low
Released on: 08/01/2025
Advisory:
Bugzilla: 2336541
Bugzilla Description: kernel: bpf: put bpf_link's program when link is safe to be deallocated
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56785
Severity: moderate
Released on: 08/01/2025
Advisory:
Bugzilla: 2336543
Bugzilla Description: kernel: MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56784
Severity: moderate
Released on: 08/01/2025
Advisory:
Bugzilla: 2336544
Bugzilla Description: kernel: drm/amd/display: Adding array index check to prevent memory corruption
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56783
Severity: moderate
Released on: 08/01/2025
Advisory:
Bugzilla: 2336546
Bugzilla Description: kernel: netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56781
Severity: low
Released on: 08/01/2025
Advisory:
Bugzilla: 2336547
Bugzilla Description: kernel: powerpc/prom_init: Fixup missing powermac #size-cells
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56782
Severity: low
Released on: 08/01/2025
Advisory:
Bugzilla: 2336548
Bugzilla Description: kernel: ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56780
Severity: low
Released on: 08/01/2025
Advisory:
Bugzilla: 2336549
Bugzilla Description: kernel: quota: flush quota_release_work upon quota writeback
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56779
Severity: low
Released on: 08/01/2025
Advisory:
Bugzilla: 2336550
Bugzilla Description: kernel: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56778
Severity: moderate
Released on: 08/01/2025
Advisory:
Bugzilla: 2336551
Bugzilla Description: kernel: drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56777
Severity: moderate
Released on: 08/01/2025
Advisory:
Bugzilla: 2336552
Bugzilla Description: kernel: drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56776
Severity: moderate
Released on: 08/01/2025
Advisory:
Bugzilla: 2336553
Bugzilla Description: kernel: drm/sti: avoid potential dereference of error pointers
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56775
Severity: low
Released on: 08/01/2025
Advisory:
Bugzilla: 2336554
Bugzilla Description: kernel: drm/amd/display: Fix handling of plane refcount
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56774
Severity: low
Released on: 08/01/2025
Advisory:
Bugzilla: 2336556
Bugzilla Description: kernel: btrfs: add a sanity check for btrfs root in btrfs_search_slot()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56773
Severity: low
Released on: 08/01/2025
Advisory:
Bugzilla: 2336558
Bugzilla Description: kernel: kunit: Fix potential null dereference in kunit_device_driver_test()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56771
Severity: low
Released on: 08/01/2025
Advisory:
Bugzilla: 2336559
Bugzilla Description: kernel: mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56772
Severity: low
Released on: 08/01/2025
Advisory:
Bugzilla: 2336560
Bugzilla Description: kernel: kunit: string-stream: Fix a UAF bug in kunit_init_suite()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-0243
Severity: moderate
Released on: 07/01/2025
Advisory: RHSA-2025:0138, RHSA-2025:0137, RHSA-2025:0134, RHSA-2025:0167, RHSA-2025:0144, RHSA-2025:0133, RHSA-2025:0166, RHSA-2025:0136, RHSA-2025:0147, RHSA-2025:0135, RHSA-2025:0162, RHSA-2025:0132, RHSA-2025:0165, RHSA-2025:0080,
Bugzilla: 2336175
Bugzilla Description: firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-120
Affected Packages: firefox-0:128.6.0-1.el9_0,firefox-0:128.6.0-1.el8_4,firefox-0:128.6.0-1.el9_4,firefox-0:128.6.0-1.el8_2,firefox-0:128.6.0-1.el8_10,firefox-0:128.6.0-1.el9_2,firefox-0:128.6.0-1.el7_9,firefox-0:128.6.0-1.el8_8,thunderbird-0:128.6.0-3.el9_4,firefox-0:128.6.0-1.el8_6,firefox-0:128.6.0-1.el9_5,thunderbird-0:128.6.0-3.el9_5,thunderbird-0:128.6.0-3.el9_0,thunderbird-0:128.6.0-3.el9_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-0247
Severity: important
Released on: 07/01/2025
Advisory:
Bugzilla: 2336176
Bugzilla Description: firefox: thunderbird: Memory safety bugs fixed in Firefox 134 and Thunderbird 134
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-0242
Severity: important
Released on: 07/01/2025
Advisory: RHSA-2025:0138, RHSA-2025:0137, RHSA-2025:0134, RHSA-2025:0167, RHSA-2025:0144, RHSA-2025:0133, RHSA-2025:0166, RHSA-2025:0136, RHSA-2025:0147, RHSA-2025:0135, RHSA-2025:0162, RHSA-2025:0132, RHSA-2025:0165, RHSA-2025:0080,
Bugzilla: 2336181
Bugzilla Description: firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-120
Affected Packages: firefox-0:128.6.0-1.el9_0,firefox-0:128.6.0-1.el8_4,firefox-0:128.6.0-1.el9_4,firefox-0:128.6.0-1.el8_2,firefox-0:128.6.0-1.el8_10,firefox-0:128.6.0-1.el9_2,firefox-0:128.6.0-1.el7_9,firefox-0:128.6.0-1.el8_8,thunderbird-0:128.6.0-3.el9_4,firefox-0:128.6.0-1.el8_6,firefox-0:128.6.0-1.el9_5,thunderbird-0:128.6.0-3.el9_5,thunderbird-0:128.6.0-3.el9_0,thunderbird-0:128.6.0-3.el9_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-0238
Severity: moderate
Released on: 07/01/2025
Advisory: RHSA-2025:0162, RHSA-2025:0132, RHSA-2025:0138, RHSA-2025:0137, RHSA-2025:0080, RHSA-2025:0134, RHSA-2025:0144, RHSA-2025:0133, RHSA-2025:0136, RHSA-2025:0135,
Bugzilla: 2336165
Bugzilla Description: firefox: Use-after-free when breaking lines in text
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-416
Affected Packages: firefox-0:128.6.0-1.el7_9,firefox-0:128.6.0-1.el8_8,firefox-0:128.6.0-1.el8_6,firefox-0:128.6.0-1.el9_5,firefox-0:128.6.0-1.el9_0,firefox-0:128.6.0-1.el8_4,firefox-0:128.6.0-1.el9_4,firefox-0:128.6.0-1.el8_2,firefox-0:128.6.0-1.el8_10,firefox-0:128.6.0-1.el9_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-0241
Severity: moderate
Released on: 07/01/2025
Advisory: RHSA-2025:0162, RHSA-2025:0132, RHSA-2025:0138, RHSA-2025:0137, RHSA-2025:0080, RHSA-2025:0134, RHSA-2025:0144, RHSA-2025:0133, RHSA-2025:0136, RHSA-2025:0135,
Bugzilla: 2336168
Bugzilla Description: firefox: Memory corruption when using JavaScript Text Segmentation
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-119
Affected Packages: firefox-0:128.6.0-1.el7_9,firefox-0:128.6.0-1.el8_8,firefox-0:128.6.0-1.el8_6,firefox-0:128.6.0-1.el9_5,firefox-0:128.6.0-1.el9_0,firefox-0:128.6.0-1.el8_4,firefox-0:128.6.0-1.el9_4,firefox-0:128.6.0-1.el8_2,firefox-0:128.6.0-1.el8_10,firefox-0:128.6.0-1.el9_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-0239
Severity: moderate
Released on: 07/01/2025
Advisory: RHSA-2025:0162, RHSA-2025:0132, RHSA-2025:0138, RHSA-2025:0137, RHSA-2025:0080, RHSA-2025:0134, RHSA-2025:0144, RHSA-2025:0133, RHSA-2025:0136, RHSA-2025:0135,
Bugzilla: 2336170
Bugzilla Description: firefox: Alt-Svc ALPN validation failure when redirected
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-601
Affected Packages: firefox-0:128.6.0-1.el7_9,firefox-0:128.6.0-1.el8_8,firefox-0:128.6.0-1.el8_6,firefox-0:128.6.0-1.el9_5,firefox-0:128.6.0-1.el9_0,firefox-0:128.6.0-1.el8_4,firefox-0:128.6.0-1.el9_4,firefox-0:128.6.0-1.el8_2,firefox-0:128.6.0-1.el8_10,firefox-0:128.6.0-1.el9_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-0240
Severity: moderate
Released on: 07/01/2025
Advisory: RHSA-2025:0162, RHSA-2025:0132, RHSA-2025:0138, RHSA-2025:0137, RHSA-2025:0080, RHSA-2025:0134, RHSA-2025:0144, RHSA-2025:0133, RHSA-2025:0136, RHSA-2025:0135,
Bugzilla: 2336188
Bugzilla Description: firefox: Compartment mismatch when parsing JavaScript JSON module
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-416
Affected Packages: firefox-0:128.6.0-1.el7_9,firefox-0:128.6.0-1.el8_8,firefox-0:128.6.0-1.el8_6,firefox-0:128.6.0-1.el9_5,firefox-0:128.6.0-1.el9_0,firefox-0:128.6.0-1.el8_4,firefox-0:128.6.0-1.el9_4,firefox-0:128.6.0-1.el8_2,firefox-0:128.6.0-1.el8_10,firefox-0:128.6.0-1.el9_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-0245
Severity: moderate
Released on: 07/01/2025
Advisory:
Bugzilla: 2336172
Bugzilla Description: firefox: Lock screen setting bypass in Firefox Focus for Android
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-288
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-0237
Severity: moderate
Released on: 07/01/2025
Advisory: RHSA-2025:0162, RHSA-2025:0132, RHSA-2025:0138, RHSA-2025:0137, RHSA-2025:0080, RHSA-2025:0134, RHSA-2025:0144, RHSA-2025:0133, RHSA-2025:0136, RHSA-2025:0135,
Bugzilla: 2336182
Bugzilla Description: firefox: WebChannel APIs susceptible to confused deputy attack
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-441
Affected Packages: firefox-0:128.6.0-1.el7_9,firefox-0:128.6.0-1.el8_8,firefox-0:128.6.0-1.el8_6,firefox-0:128.6.0-1.el9_5,firefox-0:128.6.0-1.el9_0,firefox-0:128.6.0-1.el8_4,firefox-0:128.6.0-1.el9_4,firefox-0:128.6.0-1.el8_2,firefox-0:128.6.0-1.el8_10,firefox-0:128.6.0-1.el9_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-0246
Severity: moderate
Released on: 07/01/2025
Advisory:
Bugzilla: 2336183
Bugzilla Description: firefox: Address bar spoofing using an invalid protocol scheme on Firefox for Android
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-451
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-0244
Severity: important
Released on: 07/01/2025
Advisory:
Bugzilla: 2336187
Bugzilla Description: firefox: Address bar spoofing using an invalid protocol scheme on Firefox for Android
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-451
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-12426
Severity: moderate
Released on: 07/01/2025
Advisory:
Bugzilla: 2336117
Bugzilla Description: LibreOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
CVSS Score:
CVSSv3 Score: 5.0
Vector:
CWE: CWE-200
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-12425
Severity: low
Released on: 07/01/2025
Advisory:
Bugzilla: 2336110
Bugzilla Description: LibreOffice: Path traversal leading to arbitrary .ttf file write
CVSS Score:
CVSSv3 Score: 2.8
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-51741
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2336007
Bugzilla Description: redis: Redis allows denial-of-service due to malformed ACL selectors
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-20
Affected Packages:
Package States: OpenShift Lightspeed,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Ansible Automation Platform 1.2,Red Hat Discovery,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Fuse 7,Red Hat Quay 3,
Full Details
CVE document

CVE-2024-46981
Severity: important
Released on: 06/01/2025
Advisory:
Bugzilla: 2336004
Bugzilla Description: redis: Redis' Lua library commands may lead to remote code execution
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-416
Affected Packages:
Package States: OpenShift Lightspeed,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Ansible Automation Platform 1.2,Red Hat Discovery,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Fuse 7,Red Hat Quay 3,
Full Details
CVE document

CVE-2025-21614
Severity: important
Released on: 06/01/2025
Advisory:
Bugzilla: 2335901
Bugzilla Description: go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: (CWE-400|CWE-770)
Affected Packages:
Package States: OpenShift API for Data Protection,OpenShift Developer Tools and Services,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Ceph Storage 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,
Full Details
CVE document

CVE-2025-21613
Severity: important
Released on: 06/01/2025
Advisory:
Bugzilla: 2335888
Bugzilla Description: go-git: argument injection via the URL field
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-88
Affected Packages:
Package States: OpenShift API for Data Protection,OpenShift Developer Tools and Services,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Ceph Storage 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,
Full Details
CVE document

CVE-2024-56766
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335889
Bugzilla Description: kernel: mtd: rawnand: fix double free in atmel_pmecc_create_user()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56761
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335890
Bugzilla Description: kernel: x86/fred: Clear WFE in missing-ENDBRANCH #CPs
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56759
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335891
Bugzilla Description: kernel: btrfs: fix use-after-free when COWing tree bock and tracing is enabled
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56769
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335893
Bugzilla Description: kernel: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56768
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335896
Bugzilla Description: kernel: bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56762
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335897
Bugzilla Description: kernel: io_uring/sqpoll: fix sqpoll error handling races
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56763
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335898
Bugzilla Description: kernel: tracing: Prevent bad count for tracing_cpumask_write
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56757
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335899
Bugzilla Description: kernel: Bluetooth: btusb: mediatek: add intf release flow when usb disconnect
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56765
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335900
Bugzilla Description: kernel: powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56767
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335902
Bugzilla Description: kernel: dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56764
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335903
Bugzilla Description: kernel: ublk: detach gendisk from ublk device if add_disk() fails
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56758
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335904
Bugzilla Description: kernel: btrfs: check folio mapping after unlock in relocate_one_folio()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56760
Severity: moderate
Released on: 06/01/2025
Advisory:
Bugzilla: 2335906
Bugzilla Description: kernel: PCI/MSI: Handle lack of irqdomain gracefully
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-55553
Severity: important
Released on: 06/01/2025
Advisory:
Bugzilla: 2336038
Bugzilla Description: frr: DoS via repeated RIB revalidation
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56332
Severity: moderate
Released on: 03/01/2025
Advisory:
Bugzilla: 2335479
Bugzilla Description: next.js: Next.js Vulnerable to Denial of Service (DoS) with Server Actions
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Trusted Artifact Signer,streams for Apache Kafka,
Full Details
CVE document

CVE-2024-36613
Severity: low
Released on: 03/01/2025
Advisory:
Bugzilla: 2335448
Bugzilla Description: ffmpeg: Integer overflow in ffmpeg
CVSS Score:
CVSSv3 Score: 3.9
Vector:
CWE: CWE-190
Affected Packages:
Package States:
Full Details
CVE document

CVE-2024-35365
Severity: moderate
Released on: 03/01/2025
Advisory:
Bugzilla: 2335450
Bugzilla Description: ffmpeg: double-free vulnerability in FFMPEG
CVSS Score:
CVSSv3 Score: 4.6
Vector:
CWE: CWE-415
Affected Packages:
Package States:
Full Details
CVE document

CVE-2025-22376
Severity: moderate
Released on: 03/01/2025
Advisory:
Bugzilla: 2335488
Bugzilla Description: perl-Net-OAuth: Default nonce for Net::OAuth package for perl is not cryptographically strong
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-338
Affected Packages:
Package States:
Full Details
CVE document

CVE-2022-49035
Severity: moderate
Released on: 02/01/2025
Advisory:
Bugzilla: 2335291
Bugzilla Description: kernel: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56738
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334771
Bugzilla Description: grub2: Observable Timing Discrepancy resulting side-channel attacks
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-208
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-56737
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334772
Bugzilla Description: grub2: heap-based buffer overflow
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-56712
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334788
Bugzilla Description: kernel: udmabuf: fix memory leak on last export_udmabuf() error path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56716
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334789
Bugzilla Description: kernel: netdevsim: prevent bad user input in nsim_dev_health_break_write()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56711
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334790
Bugzilla Description: kernel: drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56717
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334791
Bugzilla Description: kernel: net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56710
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334792
Bugzilla Description: kernel: ceph: fix memory leak in ceph_direct_read_write()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56718
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334793
Bugzilla Description: kernel: net/smc: protect link down work from execute after lgr freed
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56709
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334795
Bugzilla Description: kernel: io_uring: check if iowq is killed before queuing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56714
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334796
Bugzilla Description: kernel: ionic: no double destroy workqueue
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56715
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334797
Bugzilla Description: kernel: ionic: Fix netdev notifier unregister on failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56719
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334798
Bugzilla Description: kernel: net: stmmac: fix TSO DMA API usage causing oops
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56713
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334799
Bugzilla Description: kernel: net: netdevsim: fix nsim_pp_hold_write()
CVSS Score:
CVSSv3 Score: 4.1
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56752
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334804
Bugzilla Description: kernel: drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56756
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334805
Bugzilla Description: kernel: nvme-pci: fix freeing of the HMB descriptor table
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56728
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334806
Bugzilla Description: kernel: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56743
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334807
Bugzilla Description: kernel: nfs_common: must not hold RCU while calling nfsd_file_put_local
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56741
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334808
Bugzilla Description: kernel: apparmor: test: Fix memory leak for aa_unpack_strdup()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56729
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334809
Bugzilla Description: kernel: smb: Initialize cfid->tcon before performing network ops
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56724
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334810
Bugzilla Description: kernel: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56720
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334811
Bugzilla Description: kernel: bpf, sockmap: Several fixes to bpf_msg_pop_data
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56754
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334812
Bugzilla Description: kernel: crypto: caam - Fix the pointer passed to caam_qi_shutdown()
CVSS Score:
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56727
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334813
Bugzilla Description: kernel: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56747
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334814
Bugzilla Description: kernel: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56746
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334815
Bugzilla Description: kernel: fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56725
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334816
Bugzilla Description: kernel: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56751
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334817
Bugzilla Description: kernel: ipv6: release nexthop on device removal
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-404
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56753
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334818
Bugzilla Description: kernel: drm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 Module
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56742
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334819
Bugzilla Description: kernel: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56721
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334820
Bugzilla Description: kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56744
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334821
Bugzilla Description: kernel: f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56730
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334822
Bugzilla Description: kernel: net/9p/usbg: fix handling of the failed kzalloc() memory allocation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56740
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334823
Bugzilla Description: kernel: nfs/localio: must clear res.replen in nfs_local_read_done
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56726
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334824
Bugzilla Description: kernel: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56745
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334825
Bugzilla Description: kernel: PCI: Fix reset_method_store() memory leak
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56748
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334826
Bugzilla Description: kernel: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56755
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334827
Bugzilla Description: kernel: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56722
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334828
Bugzilla Description: kernel: RDMA/hns: Fix cpu stuck caused by printings during reset
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56739
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334829
Bugzilla Description: kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56723
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334830
Bugzilla Description: kernel: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56749
Severity: low
Released on: 29/12/2025
Advisory:
Bugzilla: 2334831
Bugzilla Description: kernel: dlm: fix dlm_recover_members refcount on error
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56750
Severity: moderate
Released on: 29/12/2025
Advisory:
Bugzilla: 2334832
Bugzilla Description: kernel: erofs: fix blksize < PAGE_SIZE for file-backed mounts
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56679
Severity: moderate
Released on: 28/12/2024
Advisory:
Bugzilla: 2334661
Bugzilla Description: kernel: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56706
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334662
Bugzilla Description: kernel: s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56696
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334663
Bugzilla Description: kernel: ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56700
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334664
Bugzilla Description: kernel: media: wl128x: Fix atomicity violation in fmc_send_cmd()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56681
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334665
Bugzilla Description: kernel: crypto: bcm - add error check in the ahash_hmac_init function
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56701
Severity: moderate
Released on: 28/12/2024
Advisory:
Bugzilla: 2334666
Bugzilla Description: kernel: powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56688
Severity: moderate
Released on: 28/12/2024
Advisory:
Bugzilla: 2334667
Bugzilla Description: kernel: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56677
Severity: moderate
Released on: 28/12/2024
Advisory:
Bugzilla: 2334668
Bugzilla Description: kernel: powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56687
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334669
Bugzilla Description: kernel: usb: musb: Fix hardware lockup on first Rx endpoint request
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56702
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334670
Bugzilla Description: kernel: bpf: Mark raw_tp arguments with PTR_MAYBE_NULL
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56697
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334671
Bugzilla Description: kernel: drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56708
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334672
Bugzilla Description: kernel: EDAC/igen6: Avoid segmentation fault on module unload
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56682
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334674
Bugzilla Description: kernel: irqchip/riscv-aplic: Prevent crash when MSI domain is missing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56680
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334675
Bugzilla Description: kernel: media: intel/ipu6: do not handle interrupts when device is disabled
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56690
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334676
Bugzilla Description: kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56699
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334677
Bugzilla Description: kernel: s390/pci: Fix potential double remove of hotplug slot
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56686
Severity: moderate
Released on: 28/12/2024
Advisory:
Bugzilla: 2334678
Bugzilla Description: kernel: ext4: fix race in buffer_head read fault injection
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56703
Severity: moderate
Released on: 28/12/2024
Advisory:
Bugzilla: 2334679
Bugzilla Description: kernel: ipv6: Fix soft lockups in fib6_select_path under high next hop churn
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56698
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334680
Bugzilla Description: kernel: usb: dwc3: gadget: Fix looping of queued SG entries
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56685
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334681
Bugzilla Description: kernel: ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56684
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334682
Bugzilla Description: kernel: mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56693
Severity: moderate
Released on: 28/12/2024
Advisory:
Bugzilla: 2334683
Bugzilla Description: kernel: brd: defer automatic disk creation until module initialization succeeds
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56691
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334684
Bugzilla Description: kernel: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56689
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334685
Bugzilla Description: kernel: PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56683
Severity: moderate
Released on: 28/12/2024
Advisory:
Bugzilla: 2334686
Bugzilla Description: kernel: drm/vc4: hdmi: Avoid hang with debug registers when suspended
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56704
Severity: moderate
Released on: 28/12/2024
Advisory:
Bugzilla: 2334687
Bugzilla Description: kernel: 9p/xen: fix release of IRQ
CVSS Score:
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56695
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334688
Bugzilla Description: kernel: drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()'
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56705
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334689
Bugzilla Description: kernel: media: atomisp: Add check for rgby_data memory allocation failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56692
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334690
Bugzilla Description: kernel: f2fs: fix to do sanity check on node blkaddr in truncate_node()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56676
Severity: moderate
Released on: 28/12/2024
Advisory:
Bugzilla: 2334691
Bugzilla Description: kernel: thermal: testing: Initialize some variables annoteded with _free()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56678
Severity: moderate
Released on: 28/12/2024
Advisory:
Bugzilla: 2334692
Bugzilla Description: kernel: powerpc/mm/fault: Fix kfence page fault reporting
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56707
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334693
Bugzilla Description: kernel: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56694
Severity: low
Released on: 28/12/2024
Advisory:
Bugzilla: 2334694
Bugzilla Description: kernel: bpf: fix recursive lock when verdict program return SK_PASS
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53180
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334348
Bugzilla Description: kernel: ALSA: pcm: Add sanity NULL check for the default mmap fault handler
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53182
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334349
Bugzilla Description: kernel: Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()"
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53164
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334350
Bugzilla Description: kernel: net: sched: fix ordering of qlen adjustment
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53223
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334351
Bugzilla Description: kernel: clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53226
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334352
Bugzilla Description: kernel: RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53235
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334353
Bugzilla Description: kernel: erofs: fix file-backed mounts over FUSE
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53207
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334354
Bugzilla Description: kernel: Bluetooth: MGMT: Fix possible deadlocks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53176
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334355
Bugzilla Description: kernel: smb: During unmount, ensure all cached dir instances drop their dentry
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53212
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334356
Bugzilla Description: kernel: netlink: fix false positive warning in extack during dumps
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53229
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334357
Bugzilla Description: kernel: RDMA/rxe: Fix the qp flush warnings in req
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53172
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334358
Bugzilla Description: kernel: ubi: fastmap: Fix duplicate slab cache names while attaching
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53177
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334359
Bugzilla Description: kernel: smb: prevent use-after-free due to open_cached_dir error paths
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53178
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334360
Bugzilla Description: kernel: smb: Don't leak cfid when reconnect races with open_cached_dir
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53210
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334361
Bugzilla Description: kernel: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53191
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334362
Bugzilla Description: kernel: wifi: ath12k: fix warning when unbinding
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53228
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334363
Bugzilla Description: kernel: riscv: kvm: Fix out-of-bounds array access
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53201
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334364
Bugzilla Description: kernel: drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53187
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334365
Bugzilla Description: kernel: io_uring: check for overflows in io_pin_pages
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49034
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334366
Bugzilla Description: kernel: sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53194
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334367
Bugzilla Description: kernel: PCI: Fix use-after-free of slot->bus on hot remove
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53205
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334368
Bugzilla Description: kernel: phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53167
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334369
Bugzilla Description: kernel: nfs/blocklayout: Don't attempt unregister for invalid block device
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53175
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334370
Bugzilla Description: kernel: ipc: fix memleak if msg_init_ns failed in create_ipc_ns
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53171
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334371
Bugzilla Description: kernel: ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53218
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334372
Bugzilla Description: kernel: f2fs: fix race in concurrent f2fs_stop_gc_thread
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53222
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334373
Bugzilla Description: kernel: zram: fix NULL pointer in comp_algorithm_show()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53168
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334374
Bugzilla Description: kernel: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53221
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334375
Bugzilla Description: kernel: f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53233
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334376
Bugzilla Description: kernel: unicode: Fix utf8_load() error path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53169
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334377
Bugzilla Description: kernel: nvme-fabrics: fix kernel crash while shutting down controller
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53186
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334378
Bugzilla Description: kernel: ksmbd: fix use-after-free in SMB request handling
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53199
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334379
Bugzilla Description: kernel: ASoC: imx-audmix: Add NULL check in imx_audmix_probe
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53225
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334380
Bugzilla Description: kernel: iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53227
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334381
Bugzilla Description: kernel: scsi: bfa: Fix use-after-free in bfad_im_module_exit()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53211
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334382
Bugzilla Description: kernel: net/l2tp: fix warning in l2tp_exit_net found by syzbot
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53195
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334383
Bugzilla Description: kernel: KVM: arm64: Get rid of userspace_irqchip_in_use
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53166
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334384
Bugzilla Description: kernel: block, bfq: fix bfqq uaf in bfq_limit_depth()
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53230
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334385
Bugzilla Description: kernel: cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53237
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334386
Bugzilla Description: kernel: Bluetooth: fix use-after-free in device_for_each_child()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53214
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334387
Bugzilla Description: kernel: vfio/pci: Properly hide first-in-list PCIe extended capability
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53213
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334388
Bugzilla Description: kernel: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53183
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334389
Bugzilla Description: kernel: um: net: Do not use drvdata in release
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53165
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334390
Bugzilla Description: kernel: sh: intc: Fix use-after-free bug in register_intc_controller()
CVSS Score:
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53192
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334391
Bugzilla Description: kernel: clk: clk-loongson2: Fix potential buffer overflow in flexible-array member access
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53208
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334392
Bugzilla Description: kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53185
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334393
Bugzilla Description: kernel: smb: client: fix NULL ptr deref in crypto_aead_setkey()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53204
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334394
Bugzilla Description: kernel: phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53236
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334395
Bugzilla Description: kernel: xsk: Free skb when TX metadata options are invalid
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53170
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334396
Bugzilla Description: kernel: block: fix uaf for flush rq while iterating tags
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53193
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334397
Bugzilla Description: kernel: clk: clk-loongson2: Fix memory corruption bug in struct loongson2_clk_provider
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53173
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334398
Bugzilla Description: kernel: NFSv4.0: Fix a use-after-free problem in the asynchronous open()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53224
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334399
Bugzilla Description: kernel: RDMA/mlx5: Move events notifier registration to be after device registration
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53184
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334400
Bugzilla Description: kernel: um: ubd: Do not use drvdata in release
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53179
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334401
Bugzilla Description: kernel: smb: client: fix use-after-free of signing key
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53217
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334402
Bugzilla Description: kernel: NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53239
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334403
Bugzilla Description: kernel: ALSA: 6fire: Release resources at card release
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53238
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334404
Bugzilla Description: kernel: Bluetooth: btmtk: adjust the position to init iso data anchor
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53231
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334405
Bugzilla Description: kernel: cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53189
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334406
Bugzilla Description: kernel: wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53219
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334407
Bugzilla Description: kernel: virtiofs: use pages instead of pointer for kernel direct IO
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53190
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334408
Bugzilla Description: kernel: wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53203
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334409
Bugzilla Description: kernel: usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53232
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334410
Bugzilla Description: kernel: iommu/s390: Implement blocking domain
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53181
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334411
Bugzilla Description: kernel: um: vector: Do not use drvdata in release
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53197
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334412
Bugzilla Description: kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53220
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334413
Bugzilla Description: kernel: f2fs: fix to account dirty data in __get_secs_required()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53200
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334414
Bugzilla Description: kernel: drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53216
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334415
Bugzilla Description: kernel: nfsd: release svc_expkey/svc_export with rcu_work
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53202
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334416
Bugzilla Description: kernel: firmware_loader: Fix possible resource leak in fw_log_firmware_info()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53196
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334417
Bugzilla Description: kernel: KVM: arm64: Don't retire aborted MMIO instruction
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53234
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334418
Bugzilla Description: kernel: erofs: handle NONHEAD !delta[1] lclusters gracefully
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53174
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334419
Bugzilla Description: kernel: SUNRPC: make sure cache entry active before cache_show
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53198
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334420
Bugzilla Description: kernel: xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53188
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334421
Bugzilla Description: kernel: wifi: ath12k: fix crash when unbinding
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53209
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334422
Bugzilla Description: kernel: bnxt_en: Fix receive ring space parameters when XDP is active
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53206
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334423
Bugzilla Description: kernel: tcp: Fix use-after-free of nreq in reqsk_timer_handler().
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53215
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334424
Bugzilla Description: kernel: svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56591
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334426
Bugzilla Description: kernel: Bluetooth: hci_conn: Use disable_delayed_work_sync
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56577
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334427
Bugzilla Description: kernel: media: mtk-jpeg: Fix null-ptr-deref during unload module
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56544
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334428
Bugzilla Description: kernel: udmabuf: change folios array from kmalloc to kvmalloc
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56628
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334429
Bugzilla Description: kernel: LoongArch: Add architecture specific huge_pte_clear()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56562
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334430
Bugzilla Description: kernel: i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56531
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334431
Bugzilla Description: kernel: ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56611
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334432
Bugzilla Description: kernel: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56552
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334433
Bugzilla Description: kernel: drm/xe/guc_submit: fix race around suspend_pending
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56534
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334434
Bugzilla Description: kernel: isofs: avoid memory leak in iocharset
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56598
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334435
Bugzilla Description: kernel: jfs: array-index-out-of-bounds fix in dtReadFirst
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56630
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334436
Bugzilla Description: kernel: ocfs2: free inode when ocfs2_get_init_inode() fails
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56618
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334437
Bugzilla Description: kernel: pmdomain: imx: gpcv2: Adjust delay after power up handshake
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56550
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334438
Bugzilla Description: kernel: s390/stacktrace: Use break instead of return statement
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56603
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334439
Bugzilla Description: kernel: net: af_can: do not leave a dangling sk pointer in can_create()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56572
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334440
Bugzilla Description: kernel: media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56535
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334441
Bugzilla Description: kernel: wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56606
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334442
Bugzilla Description: kernel: af_packet: avoid erroring out after sock_init_data() in packet_create()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56624
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334443
Bugzilla Description: kernel: iommufd: Fix out_fput in iommufd_fault_alloc()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56554
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334444
Bugzilla Description: kernel: binder: fix freeze UAF in binder_release_work()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56556
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334445
Bugzilla Description: kernel: binder: fix node UAF in binder_add_freeze_work()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56579
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334446
Bugzilla Description: kernel: media: amphion: Set video drvdata before register video device
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56565
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334447
Bugzilla Description: kernel: f2fs: fix to drop all discards after creating snapshot on lvm device
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56595
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334448
Bugzilla Description: kernel: jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56548
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334449
Bugzilla Description: kernel: hfsplus: don't query the device logical block size multiple times
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56571
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334450
Bugzilla Description: kernel: media: uvcvideo: Require entities to have a non-zero unique ID
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56561
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334451
Bugzilla Description: kernel: PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56546
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334452
Bugzilla Description: kernel: drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56593
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334453
Bugzilla Description: kernel: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56607
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334454
Bugzilla Description: kernel: wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56599
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334455
Bugzilla Description: kernel: wifi: ath10k: avoid NULL pointer error during sdio remove
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56541
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334456
Bugzilla Description: kernel: wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56589
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334457
Bugzilla Description: kernel: scsi: hisi_sas: Add cond_resched() for no forced preemption model
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56600
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334458
Bugzilla Description: kernel: net: inet6: do not leave a dangling sk pointer in inet6_create()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56594
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334459
Bugzilla Description: kernel: drm/amdgpu: set the right AMDGPU sg segment limitation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56581
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334460
Bugzilla Description: kernel: btrfs: ref-verify: fix use-after-free after invalid ref action
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56623
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334461
Bugzilla Description: kernel: scsi: qla2xxx: Fix use after free on unload
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56612
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334462
Bugzilla Description: kernel: mm/gup: handle NULL pages in unpin_user_pages()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56566
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334463
Bugzilla Description: kernel: mm/slub: Avoid list corruption when removing a slab from the full list
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56608
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334464
Bugzilla Description: kernel: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56573
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334465
Bugzilla Description: kernel: efi/libstub: Free correct pointer on failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56557
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334466
Bugzilla Description: kernel: iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56596
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334467
Bugzilla Description: kernel: jfs: fix array-index-out-of-bounds in jfs_readdir
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56621
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334468
Bugzilla Description: kernel: scsi: ufs: core: Cancel RTC work during ufshcd_remove()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56570
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334469
Bugzilla Description: kernel: ovl: Filter invalid inodes with missing lookup function
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56620
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334471
Bugzilla Description: kernel: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56601
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334472
Bugzilla Description: kernel: net: inet: do not leave a dangling sk pointer in inet_create()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56576
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334474
Bugzilla Description: kernel: media: i2c: tc358743: Fix crash in the probe error path when using polling
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56564
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334475
Bugzilla Description: kernel: ceph: pass cred pointer to ceph_mds_auth_match()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56609
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334476
Bugzilla Description: kernel: wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56559
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334477
Bugzilla Description: kernel: mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation
CVSS Score:
CVSSv3 Score: 4.1
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56549
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334478
Bugzilla Description: kernel: cachefiles: Fix NULL pointer dereference in object->file
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56551
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334479
Bugzilla Description: kernel: drm/amdgpu: fix usage slab after free
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56585
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334480
Bugzilla Description: kernel: LoongArch: Fix sleeping in atomic context for PREEMPT_RT
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56542
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334481
Bugzilla Description: kernel: drm/amd/display: fix a memleak issue when driver is removed
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56553
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334482
Bugzilla Description: kernel: binder: fix memleak of proc->delivered_freeze
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56616
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334483
Bugzilla Description: kernel: drm/dp_mst: Fix MST sideband message body length check
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56539
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334484
Bugzilla Description: kernel: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56583
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334485
Bugzilla Description: kernel: sched/deadline: Fix warning in migrate_enable for boosted tasks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56590
Severity: important
Released on: 27/12/2024
Advisory:
Bugzilla: 2334486
Bugzilla Description: kernel: Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-1050
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56532
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334487
Bugzilla Description: kernel: ALSA: us122l: Use snd_card_free_when_closed() at disconnection
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56545
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334488
Bugzilla Description: kernel: HID: hyperv: streamline driver probe to avoid devres issues
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56586
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334489
Bugzilla Description: kernel: f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56582
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334490
Bugzilla Description: kernel: btrfs: fix use-after-free in btrfs_encoded_read_endio()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56613
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334491
Bugzilla Description: kernel: sched/numa: fix memory leak due to the overwritten vma->numab_state
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56560
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334492
Bugzilla Description: kernel: slab: Fix too strict alignment check in create_cache()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56615
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334493
Bugzilla Description: kernel: bpf: fix OOB devmap writes when deleting elements
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56592
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334494
Bugzilla Description: kernel: bpf: Call free_htab_elem() after htab_unlock_bucket()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56604
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334495
Bugzilla Description: kernel: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56580
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334496
Bugzilla Description: kernel: media: qcom: camss: fix error path on configuration of power domains
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56578
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334497
Bugzilla Description: kernel: media: imx-jpeg: Set video drvdata before register video device
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56533
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334498
Bugzilla Description: kernel: ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56569
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334499
Bugzilla Description: kernel: ftrace: Fix regression with module command in stack_trace_filter
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56619
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334500
Bugzilla Description: kernel: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
CVSS Score:
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56602
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334501
Bugzilla Description: kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56626
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334502
Bugzilla Description: kernel: ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56605
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334503
Bugzilla Description: kernel: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56597
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334504
Bugzilla Description: kernel: jfs: fix shift-out-of-bounds in dbSplit
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56587
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334505
Bugzilla Description: kernel: leds: class: Protect brightness_show() with led_cdev->led_access mutex
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56555
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334506
Bugzilla Description: kernel: binder: fix OOB in binder_add_freeze_work()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56540
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334507
Bugzilla Description: kernel: accel/ivpu: Prevent recovery invocation during probe and resume
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56538
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334508
Bugzilla Description: kernel: drm: zynqmp_kms: Unplug DRM device before removal
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56574
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334509
Bugzilla Description: kernel: media: ts2020: fix null-ptr-deref in ts2020_probe()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56584
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334510
Bugzilla Description: kernel: io_uring/tctx: work around xa_store() allocation error issue
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56543
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334511
Bugzilla Description: kernel: wifi: ath12k: Skip Rx TID cleanup for self peer
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56625
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334512
Bugzilla Description: kernel: can: dev: can_set_termination(): allow sleeping GPIOs
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56575
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334513
Bugzilla Description: kernel: media: imx-jpeg: Ensure power suppliers be suspended before detach them
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56563
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334514
Bugzilla Description: kernel: ceph: fix cred leak in ceph_mds_check_access()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56568
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334515
Bugzilla Description: kernel: iommu/arm-smmu: Defer probe of clients after smmu device bound
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56536
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334516
Bugzilla Description: kernel: wifi: cw1200: Fix potential NULL dereference
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56627
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334517
Bugzilla Description: kernel: ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56567
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334518
Bugzilla Description: kernel: ad7780: fix division by zero in ad7780_write_raw()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56610
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334519
Bugzilla Description: kernel: kcsan: Turn report_filterlist_lock into a raw_spinlock
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56629
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334520
Bugzilla Description: kernel: HID: wacom: fix when get product name maybe null pointer
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56547
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334521
Bugzilla Description: kernel: rcu/nocb: Fix missed RCU barrier on deoffloading
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56588
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334522
Bugzilla Description: kernel: scsi: hisi_sas: Create all dump files during debugfs initialization
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56634
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334527
Bugzilla Description: kernel: gpio: grgpio: Add NULL check in grgpio_probe
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56631
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334528
Bugzilla Description: kernel: scsi: sg: Fix slab-use-after-free read in sg_release()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56636
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334531
Bugzilla Description: kernel: geneve: do not assume mac header is set in geneve_xmit_skb()
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-241
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56640
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334532
Bugzilla Description: kernel: net/smc: fix LGR and link use-after-free issue
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56639
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334533
Bugzilla Description: kernel: net: hsr: must allocate more bytes for RedBox support
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56665
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334534
Bugzilla Description: kernel: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56656
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334535
Bugzilla Description: kernel: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56652
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334536
Bugzilla Description: kernel: drm/xe/reg_sr: Remove register pool
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56672
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334537
Bugzilla Description: kernel: blk-cgroup: Fix UAF in blkcg_unpin_online()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56653
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334538
Bugzilla Description: kernel: Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56663
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334539
Bugzilla Description: kernel: wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56649
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334540
Bugzilla Description: kernel: net: enetc: Do not configure preemptible TCs if SIs do not support
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56638
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334541
Bugzilla Description: kernel: netfilter: nft_inner: incorrect percpu area handling under softirq
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56667
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334542
Bugzilla Description: kernel: drm/i915: Fix NULL pointer dereference in capture_engine
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56673
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334543
Bugzilla Description: kernel: riscv: mm: Do not call pmd dtor on vmemmap page table teardown
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56661
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334545
Bugzilla Description: kernel: tipc: fix NULL deref in cleanup_bearer()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56659
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334546
Bugzilla Description: kernel: net: lapb: increase LAPB_HEADER_LEN
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56662
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334547
Bugzilla Description: kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56675
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334548
Bugzilla Description: kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56633
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334549
Bugzilla Description: kernel: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56637
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334550
Bugzilla Description: kernel: netfilter: ipset: Hold module reference while requesting a module
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56644
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334551
Bugzilla Description: kernel: net/ipv6: release expired exception dst cached in socket
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56657
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334552
Bugzilla Description: kernel: ALSA: control: Avoid WARN() for symlink errors
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56674
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334553
Bugzilla Description: kernel: virtio_net: correct netdev_tx_reset_queue() invocation point
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56650
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334554
Bugzilla Description: kernel: netfilter: x_tables: fix LED ID check in led_tg_check()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56648
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334555
Bugzilla Description: kernel: net: hsr: avoid potential out-of-bound access in fill_frame_info()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56671
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334556
Bugzilla Description: kernel: gpio: graniterapids: Fix vGPIO driver crash
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56658
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334557
Bugzilla Description: kernel: net: defer final 'struct net' free in netns dismantle
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56641
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334558
Bugzilla Description: kernel: net/smc: initialize close_work early to avoid warning
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56655
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334559
Bugzilla Description: kernel: netfilter: nf_tables: do not defer rule destruction via call_rcu
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56645
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334560
Bugzilla Description: kernel: can: j1939: j1939_session_new(): fix skb reference counting
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56647
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334561
Bugzilla Description: kernel: net: Fix icmp host relookup triggering ip_rt_bug
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56642
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334562
Bugzilla Description: kernel: tipc: Fix use-after-free of kernel socket in cleanup_bearer().
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56654
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334563
Bugzilla Description: kernel: Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56669
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334564
Bugzilla Description: kernel: iommu/vt-d: Remove cache tags before disabling ATS
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56668
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334565
Bugzilla Description: kernel: iommu/vt-d: Fix qi_batch NULL pointer with nested parent domain
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56646
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334566
Bugzilla Description: kernel: ipv6: avoid possible NULL deref in modify_prefix_route()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56651
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334567
Bugzilla Description: kernel: can: hi311x: hi3110_can_ist(): fix potential use-after-free
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56632
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334568
Bugzilla Description: kernel: nvme-tcp: fix the memleak while create new ctrl failed
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56670
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334569
Bugzilla Description: kernel: usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56635
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334570
Bugzilla Description: kernel: net: avoid potential UAF in default_operstate()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56660
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334571
Bugzilla Description: kernel: net/mlx5: DR, prevent potential error pointer dereference
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56666
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334572
Bugzilla Description: kernel: drm/amdkfd: Dereference null return value
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56614
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334573
Bugzilla Description: kernel: xsk: fix OOB map writes when deleting elements
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56617
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334574
Bugzilla Description: kernel: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56558
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334575
Bugzilla Description: kernel: nfsd: make sure exp active before svc_export_show
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56537
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334576
Bugzilla Description: kernel: drm: xlnx: zynqmp_disp: layer may be null while releasing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56664
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334577
Bugzilla Description: kernel: bpf, sockmap: Fix race between element replace and close()
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56622
Severity: moderate
Released on: 27/12/2024
Advisory:
Bugzilla: 2334578
Bugzilla Description: kernel: scsi: ufs: core: sysfs: Prevent div by zero
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56643
Severity: low
Released on: 27/12/2024
Advisory:
Bugzilla: 2334579
Bugzilla Description: kernel: dccp: Fix memory leak in dccp_feat_change_recv
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56433
Severity: low
Released on: 26/12/2024
Advisory:
Bugzilla: 2334165
Bugzilla Description: shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
CVSS Score:
CVSSv3 Score: 3.6
Vector:
CWE: CWE-1188
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-52046
Severity: important
Released on: 25/12/2024
Advisory:
Bugzilla: 2334067
Bugzilla Description: mina-core: Apache MINA: applications using unbounded deserialization may allow RCE
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-94
Affected Packages:
Package States: A-MQ Clients 2,Red Hat AMQ Broker 7,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO,Red Hat Build of Keycloak,Red Hat Data Grid 8,Red Hat Fuse 7,Red Hat Integration Camel K,Red Hat JBoss Data Grid 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Process Automation 7,Red Hat Single Sign-On 7,streams for Apache Kafka,
Full Details
CVE document

CVE-2024-56431
Severity: low
Released on: 25/12/2024
Advisory:
Bugzilla: 2334093
Bugzilla Description: libtheora: incorrect bitwise shift in huffdec.c
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-1335
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53154
Severity: low
Released on: 24/12/2024
Advisory:
Bugzilla: 2333967
Bugzilla Description: kernel: clk: clk-apple-nco: Add NULL check in applnco_probe
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53157
Severity: low
Released on: 24/12/2024
Advisory:
Bugzilla: 2333968
Bugzilla Description: kernel: firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53151
Severity: low
Released on: 24/12/2024
Advisory:
Bugzilla: 2333969
Bugzilla Description: kernel: svcrdma: Address an integer overflow
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53148
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333970
Bugzilla Description: kernel: comedi: Flush partial mappings in error case
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53150
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333971
Bugzilla Description: kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53153
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333972
Bugzilla Description: kernel: PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53146
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333973
Bugzilla Description: kernel: NFSD: Prevent a potential integer overflow
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53152
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333974
Bugzilla Description: kernel: PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert()
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53145
Severity: low
Released on: 24/12/2024
Advisory:
Bugzilla: 2333975
Bugzilla Description: kernel: um: Fix potential integer overflow during physmem setup
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53156
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333976
Bugzilla Description: kernel: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-129
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53161
Severity: low
Released on: 24/12/2024
Advisory:
Bugzilla: 2333977
Bugzilla Description: kernel: EDAC/bluefield: Fix potential integer overflow
CVSS Score:
CVSSv3 Score: 3.8
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53163
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333979
Bugzilla Description: kernel: crypto: qat/qat_420xx - fix off by one in uof_get_name()
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53149
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333980
Bugzilla Description: kernel: usb: typec: ucsi: glink: fix off-by-one in connector_status
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53162
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333981
Bugzilla Description: kernel: crypto: qat/qat_4xxx - fix off by one in uof_get_name()
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53160
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333982
Bugzilla Description: kernel: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-362
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53158
Severity: low
Released on: 24/12/2024
Advisory:
Bugzilla: 2333983
Bugzilla Description: kernel: soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-124
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53159
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333984
Bugzilla Description: kernel: hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53147
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333985
Bugzilla Description: kernel: exfat: fix out-of-bounds access of directory entries
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-119
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-53155
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2333986
Bugzilla Description: kernel: ocfs2: fix uninitialized value in ocfs2_file_read_iter()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56826
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2335172
Bugzilla Description: openjpeg: heap buffer overflow in bin/common/color.c
CVSS Score:
CVSSv3 Score: 5.6
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56827
Severity: moderate
Released on: 24/12/2024
Advisory:
Bugzilla: 2335174
Bugzilla Description: openjpeg: heap buffer overflow in lib/openjp2/j2k.c
CVSS Score:
CVSSv3 Score: 5.6
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56326
Severity: important
Released on: 23/12/2024
Advisory:
Bugzilla: 2333856
Bugzilla Description: jinja2: Jinja has a sandbox breakout through indirect reference to format method
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: (CWE-1336|CWE-693)
Affected Packages:
Package States: OpenShift Lightspeed,Red Hat Ansible Automation Platform 1.2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Discovery,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 17.1,Red Hat Quay 3,
Full Details
CVE document

CVE-2024-56201
Severity: important
Released on: 23/12/2024
Advisory:
Bugzilla: 2333854
Bugzilla Description: jinja2: Jinja has a sandbox breakout through malicious filenames
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-150
Affected Packages:
Package States: OpenShift Lightspeed,Red Hat Ansible Automation Platform 1.2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Discovery,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,
Full Details
CVE document

CVE-2024-40896
Severity: critical
Released on: 23/12/2024
Advisory:
Bugzilla: 2333871
Bugzilla Description: libxml2: XXE vulnerability
CVSS Score:
CVSSv3 Score: 9.1
Vector:
CWE: CWE-611
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat JBoss Core Services,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-56378
Severity: moderate
Released on: 22/12/2024
Advisory:
Bugzilla: 2333794
Bugzilla Description: Poppler: out-of-bounds read
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-56334
Severity: important
Released on: 20/12/2024
Advisory:
Bugzilla: 2333587
Bugzilla Description: systeminformation: Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation
CVSS Score:
CVSSv3 Score: 8.0
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,
Full Details
CVE document

CVE-2024-56337
Severity: important
Released on: 20/12/2024
Advisory:
Bugzilla: 2333521
Bugzilla Description: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat JBoss Web Server 5,Red Hat JBoss Web Server 6,
Full Details
CVE document

CVE-2024-12840
Severity: moderate
Released on: 20/12/2024
Advisory:
Bugzilla: 2333494
Bugzilla Description: http proxies: Satellite: Service side request forgery in http proxies
CVSS Score:
CVSSv3 Score: 5.0
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat Satellite 6,
Full Details
CVE document

CVE-2024-12678
Severity: moderate
Released on: 20/12/2024
Advisory:
Bugzilla: 2333453
Bugzilla Description: github.com/hashicorp/nomad: Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-266
Affected Packages:
Package States: Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,
Full Details
CVE document

CVE-2024-12582
Severity: important
Released on: 20/12/2024
Advisory:
Bugzilla: 2333540
Bugzilla Description: skupper: skupper-cli: Flawed authentication method may lead to arbitrary file read or Denial of Service
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-305
Affected Packages:
Package States: Red Hat Service Interconnect 1,
Full Details
CVE document

CVE-2024-12801
Severity: low
Released on: 19/12/2024
Advisory:
Bugzilla: 2333370
Bugzilla Description: logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-918
Affected Packages:
Package States: AMQ Clients,A-MQ Clients 2,Logging Subsystem for Red Hat OpenShift,Red Hat AMQ Broker 7,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO,Red Hat build of Debezium,Red Hat Build of Keycloak,Red Hat build of OptaPlanner 8,Red Hat Data Grid 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat Integration Camel K,Red Hat JBoss Data Grid 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Web Server 6,Red Hat Process Automation 7,Red Hat Satellite 6,Red Hat Single Sign-On 7,streams for Apache Kafka,
Full Details
CVE document

CVE-2024-12798
Severity: moderate
Released on: 19/12/2024
Advisory:
Bugzilla: 2333351
Bugzilla Description: logback-core: arbitrary code execution via JaninoEventEvaluator
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-917
Affected Packages:
Package States: AMQ Clients,A-MQ Clients 2,Logging Subsystem for Red Hat OpenShift,Red Hat AMQ Broker 7,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO,Red Hat build of Debezium,Red Hat Build of Keycloak,Red Hat build of OptaPlanner 8,Red Hat Data Grid 8,Red Hat Fuse 7,Red Hat Integration Camel K,Red Hat JBoss Data Grid 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Web Server 6,Red Hat Process Automation 7,Red Hat Single Sign-On 7,streams for Apache Kafka,
Full Details
CVE document

CVE-2024-45338
Severity: important
Released on: 18/12/2024
Advisory: RHSA-2025:0224, RHSA-2025:0048,
Bugzilla: 2333122
Bugzilla Description: golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages: cryostat-tech-preview/cryostat-rhel8:3.0.1-10,cryostat-tech-preview/jfr-datasource-rhel8:3.0.1-10,cryostat-tech-preview/cryostat-reports-rhel8:3.0.1-10,cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8:3.0.1-17,container-native-virtualization/kubevirt-template-validator-rhel9:v4.17.3-3,container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9:v4.17.3-3,cryostat-tech-preview/cryostat-storage-rhel8:3.0.1-17,cryostat-tech-preview/cryostat-operator-bundle:3.0.1-10,container-native-virtualization/kubevirt-ssp-operator-rhel9:v4.17.3-5,cryostat-tech-preview/cryostat-rhel8-operator:3.0.1-16,container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9:v4.17.3-12,cryostat-tech-preview/cryostat-db-rhel8:3.0.1-16,cryostat-tech-preview/cryostat-grafana-dashboard-rhel8:3.0.1-15,
Package States: Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Fence Agents Remediation Operator,Fence Agents Remediation Operator,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logical Volume Manager Storage,Logical Volume Manager Storage,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Containers,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Node HealthCheck Operator,Node HealthCheck Operator,Node Maintenance Operator,Node Maintenance Operator,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift Developer Tools and Services,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Ansible Automation Platform 1.2,Red Hat Ceph Storage 5,Red Hat Ceph Storage 6,Red Hat Ceph Storage 8,Red Hat Ceph Storage 8,Red Hat Connectivity Link,Red Hat Connectivity Link,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Insights for Runtimes Operator,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Cluster Manager CLI,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Self Node Remediation Operator,Self Node Remediation Operator,
Full Details
CVE document

CVE-2024-53271
Severity: important
Released on: 18/12/2024
Advisory:
Bugzilla: 2333078
Bugzilla Description: envoy: HTTP/1.1 multiple issues with envoy.reloadable_features.http1_balsa_delay_reset in envoy
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-670
Affected Packages:
Package States: OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,
Full Details
CVE document

CVE-2024-53270
Severity: important
Released on: 18/12/2024
Advisory:
Bugzilla: 2333091
Bugzilla Description: envoy: HTTP/1: sending overload crashes when the request is reset beforehand in envoy
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-670
Affected Packages:
Package States: OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,
Full Details
CVE document

CVE-2024-53269
Severity: moderate
Released on: 18/12/2024
Advisory:
Bugzilla: 2333088
Bugzilla Description: envoy: Happy Eyeballs: Validate that additional_address are IP addresses instead of crashing when sorting in envoy
CVSS Score:
CVSSv3 Score: 4.5
Vector:
CWE: CWE-670
Affected Packages:
Package States: OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,
Full Details
CVE document

CVE-2024-56128
Severity: important
Released on: 18/12/2024
Advisory:
Bugzilla: 2333013
Bugzilla Description: kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-303
Affected Packages:
Package States: Red Hat build of Debezium,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Integration Camel K,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Enterprise Application Platform Expansion Pack,streams for Apache Kafka,
Full Details
CVE document

CVE-2024-53580
Severity: important
Released on: 18/12/2024
Advisory: RHSA-2025:0161, RHSA-2025:0168,
Bugzilla: 2333146
Bugzilla Description: iperf: Denial of Service in iperf Due to Improper JSON Handling
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-476
Affected Packages: iperf3-0:3.9-13.el9_5.1,iperf3-0:3.5-11.el8_10,
Package States: Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2024-12539
Severity: moderate
Released on: 17/12/2024
Advisory:
Bugzilla: 2332909
Bugzilla Description: elasticsearch: improper auth controls can allow circumvention of Document Level Security
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-863
Affected Packages:
Package States: Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Red Hat Quay 3,
Full Details
CVE document

CVE-2024-51479
Severity: moderate
Released on: 17/12/2024
Advisory:
Bugzilla: 2332884
Bugzilla Description: next.js: next: authorization bypass in Next.js
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-285
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Trusted Artifact Signer,streams for Apache Kafka,
Full Details
CVE document

CVE-2024-54677
Severity: low
Released on: 17/12/2024
Advisory:
Bugzilla: 2332815
Bugzilla Description: tomcat: Apache Tomcat: DoS in examples web application
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat JBoss Web Server 5,Red Hat JBoss Web Server 6,
Full Details
CVE document

CVE-2024-50379
Severity: important
Released on: 17/12/2024
Advisory:
Bugzilla: 2332817
Bugzilla Description: tomcat: RCE due to TOCTOU issue in JSP compilation
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat JBoss Web Server 5,Red Hat JBoss Web Server 6,
Full Details
CVE document

CVE-2024-53240
Severity: moderate
Released on: 17/12/2024
Advisory:
Bugzilla: 2331325
Bugzilla Description: kernel: xen: netfront: Backend can crash Linux netfront (Xen Security Advisory 465)
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-53241
Severity: moderate
Released on: 17/12/2024
Advisory:
Bugzilla: 2331326
Bugzilla Description: kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466)
CVSS Score:
CVSSv3 Score: 5.7
Vector:
CWE: CWE-119
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-11614
Severity: important
Released on: 17/12/2024
Advisory: RHSA-2025:0220, RHSA-2025:0208, RHSA-2025:0209, RHSA-2025:0222, RHSA-2025:0211, RHSA-2025:0221, RHSA-2025:0210,
Bugzilla: 2327955
Bugzilla Description: dpdk: Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-125
Affected Packages: dpdk-2:21.11-3.el9_0,dpdk-2:22.11-4.el9_2,dpdk-0:23.11-2.el8_10,dpdk-0:21.11-4.el8_8,dpdk-0:21.11-3.el8_6,dpdk-2:23.11-2.el9_4,dpdk-2:23.11-2.el9_5,
Package States: Fast Datapath for RHEL 7,Fast Datapath for RHEL 7,Fast Datapath for RHEL 7,Fast Datapath for RHEL 7,Fast Datapath for RHEL 7,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-53144
Severity: moderate
Released on: 17/12/2024
Advisory:
Bugzilla: 2332853
Bugzilla Description: kernel: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-12698
Severity: moderate
Released on: 16/12/2024
Advisory:
Bugzilla: 2332674
Bugzilla Description: ose-olm-catalogd-container: incomplete fix for rapid reset (CVE-2023-39325/CVE-2023-44487)
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-55949
Severity: important
Released on: 16/12/2024
Advisory:
Bugzilla: 2332681
Bugzilla Description: minio: Privilege escalation in IAM import API in MinIO
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-269
Affected Packages:
Package States: Logging Subsystem for Red Hat OpenShift,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 6,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2024-52949
Severity: moderate
Released on: 16/12/2024
Advisory:
Bugzilla: 2332702
Bugzilla Description: iptraf-ng: buffer overflow via ifaces.c
CVSS Score:
CVSSv3 Score: 6.6
Vector:
CWE: CWE-121
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-45497
Severity: moderate
Released on: 15/12/2024
Advisory:
Bugzilla: 2308673
Bugzilla Description: openshift-api: Build Process in OpenShift Allows Overwriting of Node Pull Credentials
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-732
Affected Packages:
Package States: Red Hat Fuse 7,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-55887
Severity: important
Released on: 13/12/2024
Advisory:
Bugzilla: 2332304
Bugzilla Description: ucum: Ucum-java has an XXE vulnerability in XML parsing
CVSS Score:
CVSSv3 Score: 8.6
Vector:
CWE: CWE-611
Affected Packages:
Package States: Red Hat Fuse 7,Red Hat Integration Camel K,
Full Details
CVE document

CVE-2024-12455
Severity: moderate
Released on: 12/12/2024
Advisory:
Bugzilla: 2332111
Bugzilla Description: glibc: glibc in Fedora 41 ships a broken getrandom/arc4random for ppc64le platform
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-372
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-54502
Severity: moderate
Released on: 11/12/2024
Advisory: RHSA-2025:0226, RHSA-2025:0145, RHSA-2025:0146,
Bugzilla: 2333843
Bugzilla Description: webkit: Processing maliciously crafted web content may lead to an unexpected process crash
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-125
Affected Packages: webkit2gtk3-0:2.46.5-1.el8_10,webkit2gtk3-0:2.46.5-1.el9_4,webkit2gtk3-0:2.46.5-1.el9_5,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2024-54534
Severity: important
Released on: 11/12/2024
Advisory:
Bugzilla: 2333846
Bugzilla Description: webkit: Processing maliciously crafted web content may lead to memory corruption
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-54505
Severity: important
Released on: 11/12/2024
Advisory: RHSA-2025:0226, RHSA-2025:0145, RHSA-2025:0146,
Bugzilla: 2333844
Bugzilla Description: webkit: Processing maliciously crafted web content may lead to memory corruption
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages: webkit2gtk3-0:2.46.5-1.el8_10,webkit2gtk3-0:2.46.5-1.el9_4,webkit2gtk3-0:2.46.5-1.el9_5,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,
Full Details
CVE document