CVE-2024-2961
Severity: important
Released on: 17/04/2024
Advisory:
Bugzilla: 2273404
Bugzilla Description: glibc: Out of bounds write in iconv may lead to remote code execution
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26846
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275558
Bugzilla Description: kernel: nvme-fc: do not wait in vain when unloading module
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26845
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275561
Bugzilla Description: kernel: scsi: target: core: Add TMF to tmr_list handling
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26844
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275563
Bugzilla Description: kernel: block: Fix WARNING in _copy_from_iter
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26843
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275565
Bugzilla Description: kernel: efi: runtime: Fix potential overflow of soft-reserved region size
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26842
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275567
Bugzilla Description: kernel: scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26841
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275571
Bugzilla Description: kernel: LoongArch: Update cpu_sibling_map when disabling nonboot CPUs
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26840
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275573
Bugzilla Description: kernel: cachefiles: fix memory leak in cachefiles_add_cache()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26839
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275576
Bugzilla Description: kernel: IB/hfi1: Fix a memleak in init_credit_return
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26838
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275578
Bugzilla Description: kernel: RDMA/irdma: Fix KASAN issue with tasklet
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26837
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275580
Bugzilla Description: kernel: net: bridge: switchdev: Skip MDB replays of deferred events on offload
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26836
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275582
Bugzilla Description: kernel: platform/x86: think-lmi: Fix password opcode ordering for workstations
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26835
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275584
Bugzilla Description: kernel: netfilter: nf_tables: set dormant flag on hook register failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26834
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275586
Bugzilla Description: kernel: netfilter: nft_flow_offload: release dst in case direct xmit path is used
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26833
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275588
Bugzilla Description: kernel: drm/amd/display: Fix memory leak in dm_sw_fini()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26832
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275590
Bugzilla Description: kernel: mm: zswap: fix missing folio cleanup in writeback race path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26831
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275593
Bugzilla Description: kernel: net/handshake: Fix handshake_req_destroy_test1
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26830
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275596
Bugzilla Description: kernel: i40e: Do not allow untrusted VF to remove administratively set MAC
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26829
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275598
Bugzilla Description: kernel: media: ir_toy: fix a memleak in irtoy_tx
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26828
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275600
Bugzilla Description: kernel: cifs: fix underflow in parse_server_interfaces()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26827
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275602
Bugzilla Description: kernel: i2c: qcom-geni: Correct I2C TRE sequence
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26826
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275604
Bugzilla Description: kernel: mptcp: fix data re-injection from stale subflow
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26825
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275607
Bugzilla Description: kernel: nfc: nci: free rx_data_reassembly skb on NCI device cleanup
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26824
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275609
Bugzilla Description: kernel: crypto: algif_hash - Remove bogus SGL free on zero-length error path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26823
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275611
Bugzilla Description: kernel: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26822
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275613
Bugzilla Description: kernel: smb: client: set correct id, uid and cruid for multiuser automounts
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26821
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275616
Bugzilla Description: kernel: fs: relax mount_setattr() permission checks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26820
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275618
Bugzilla Description: kernel: hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26819
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275620
Bugzilla Description: kernel: dm: limit the number of targets and parameter size area
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26818
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275622
Bugzilla Description: kernel: tools/rtla: Fix clang warning about mount_point var size
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52643
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275624
Bugzilla Description: kernel: iio: core: fix memleak in iio_device_register_sysfs
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52642
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275626
Bugzilla Description: kernel: media: rc: bpf attach/detach requires write permission
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26909
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275630
Bugzilla Description: kernel: soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26907
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275633
Bugzilla Description: kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26906
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275635
Bugzilla Description: kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26905
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275637
Bugzilla Description: kernel: btrfs: fix data races when accessing the reserved amount of block reserves
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26904
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275639
Bugzilla Description: kernel: btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26903
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275641
Bugzilla Description: kernel: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26902
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275643
Bugzilla Description: kernel: perf: RISCV: Fix panic on pmu overflow handler
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26901
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275645
Bugzilla Description: kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26900
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275647
Bugzilla Description: kernel: md: fix kmemleak of rdev->serial
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26899
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275650
Bugzilla Description: kernel: block: fix deadlock between bd_link_disk_holder and partition scan
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26898
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275652
Bugzilla Description: kernel: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26897
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275655
Bugzilla Description: kernel: wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26896
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275657
Bugzilla Description: kernel: wifi: wfx: fix memory leak when starting AP
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26895
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275659
Bugzilla Description: kernel: wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26894
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275661
Bugzilla Description: kernel: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26893
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275664
Bugzilla Description: kernel: firmware: arm_scmi: Fix double free in SMC transport cleanup path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26892
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275666
Bugzilla Description: kernel: wifi: mt76: mt7921e: fix use-after-free in free_irq()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26891
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275668
Bugzilla Description: kernel: iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26890
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275670
Bugzilla Description: kernel: Bluetooth: btrtl: fix out of bounds memory access
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26889
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275672
Bugzilla Description: kernel: Bluetooth: hci_core: Fix possible buffer overflow
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26888
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275674
Bugzilla Description: kernel: Bluetooth: msft: Fix memory leak
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26887
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275676
Bugzilla Description: kernel: Bluetooth: btusb: Fix memory leak
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26886
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275678
Bugzilla Description: kernel: Bluetooth: af_bluetooth: Fix deadlock
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26885
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275680
Bugzilla Description: kernel: bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26884
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275682
Bugzilla Description: kernel: bpf: Fix hashtab overflow check on 32-bit arches
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26883
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275684
Bugzilla Description: kernel: bpf: Fix stackmap overflow check on 32-bit arches
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26882
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275686
Bugzilla Description: kernel: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26881
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275688
Bugzilla Description: kernel: net: hns3: fix kernel crash when 1588 is received on HIP08 devices
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26880
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275690
Bugzilla Description: kernel: dm: call the resume method on internal suspend
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26879
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275692
Bugzilla Description: kernel: clk: meson: Add missing clocks to axg_clk_regmaps
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26878
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275694
Bugzilla Description: kernel: quota: Fix potential NULL pointer dereference
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26877
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275697
Bugzilla Description: kernel: crypto: xilinx - call finalize with bh disabled
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26876
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275699
Bugzilla Description: kernel: drm/bridge: adv7511: fix crash on irq during probe
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26875
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275701
Bugzilla Description: kernel: media: pvrusb2: fix uaf in pvr2_context_set_notify
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26874
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275703
Bugzilla Description: kernel: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26873
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275705
Bugzilla Description: kernel: scsi: hisi_sas: Fix a deadlock issue related to automatic dump
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26872
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275707
Bugzilla Description: kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26871
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275709
Bugzilla Description: kernel: f2fs: fix NULL pointer dereference in f2fs_submit_page_write()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26870
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275711
Bugzilla Description: kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26869
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275713
Bugzilla Description: kernel: f2fs: fix to truncate meta inode pages forcely
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26868
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275715
Bugzilla Description: kernel: nfs: fix panic when nfs4_ff_layout_prepare_ds() fails
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26867
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275717
Bugzilla Description: kernel: comedi: comedi_8255: Correct error in subdevice initialization
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26866
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275719
Bugzilla Description: kernel: spi: lpspi: Avoid potential use-after-free in probe()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26865
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275721
Bugzilla Description: kernel: rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26864
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275723
Bugzilla Description: kernel: tcp: Fix refcnt handling in __inet_hash_connect().
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26863
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275725
Bugzilla Description: kernel: hsr: Fix uninit-value access in hsr_get_node()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26862
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275727
Bugzilla Description: kernel: packet: annotate data-races around ignore_outgoing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26861
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275729
Bugzilla Description: kernel: wireguard: receive: annotate data-race around receiving_counter.counter
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26860
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275731
Bugzilla Description: kernel: dm-integrity: fix a memory leak when rechecking the data
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26859
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275733
Bugzilla Description: kernel: net/bnx2x: Prevent access to a freed page in page_pool
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26858
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275735
Bugzilla Description: kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26857
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275737
Bugzilla Description: kernel: geneve: make sure to pull inner header in geneve_rx()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26856
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275740
Bugzilla Description: kernel: net: sparx5: Fix use after free inside sparx5_del_mact_entry
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26855
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275742
Bugzilla Description: kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26908
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275744
Bugzilla Description: kernel: x86/xen: Add some null pointer checking to smp.c
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26854
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275746
Bugzilla Description: kernel: ice: fix uninitialized dplls mutex usage
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26853
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275748
Bugzilla Description: kernel: igc: avoid returning frame twice in XDP_REDIRECT
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26851
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275750
Bugzilla Description: kernel: netfilter: nf_conntrack_h323: Add protection for bmp length out of range
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26850
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275752
Bugzilla Description: kernel: mm/debug_vm_pgtable: fix BUG_ON with pud advanced test
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26849
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275754
Bugzilla Description: kernel: netlink: add nla be16/32 types to minlen array
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26848
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275756
Bugzilla Description: kernel: afs: Fix endless loop in directory parsing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26847
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275758
Bugzilla Description: kernel: powerpc/rtas: use correct function name for resetting TCE tables
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26852
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275761
Bugzilla Description: kernel: net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52645
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275771
Bugzilla Description: kernel: pmdomain: mediatek: fix race conditions with genpd
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26910
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275773
Bugzilla Description: kernel: netfilter: ipset: fix performance regression in swap operation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26920
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275775
Bugzilla Description: kernel: tracing/trigger: Fix to return error if failed to alloc snapshot
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26919
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275777
Bugzilla Description: kernel: usb: ulpi: Fix debugfs directory leak
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26918
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275782
Bugzilla Description: kernel: PCI: Fix active state requirement in PME polling
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26917
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275784
Bugzilla Description: kernel: scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26916
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275788
Bugzilla Description: kernel: Revert "drm/amd: flush any delayed gfxoff on suspend entry"
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26915
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275790
Bugzilla Description: kernel: drm/amdgpu: Reset IH OVERFLOW_CLEAR bit
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26914
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275792
Bugzilla Description: kernel: drm/amd/display: fix incorrect mpc_combine array size
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26913
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275794
Bugzilla Description: kernel: drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26912
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275796
Bugzilla Description: kernel: drm/nouveau: fix several DMA buffer leaks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26911
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275798
Bugzilla Description: kernel: drm/buddy: Fix alloc_range() error handling code
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52644
Severity: moderate
Released on: 17/04/2024
Advisory:
Bugzilla: 2275810
Bugzilla Description: kernel: wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-31463
Severity: low
Released on: 17/04/2024
Advisory:
Bugzilla: 2275847
Bugzilla Description: ironic-image: Unauthenticated local access to Ironic API
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-288
Affected Packages:
Package States: Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-21012
Severity: low
Released on: 16/04/2024
Advisory: RHSA-2024:1824, RHSA-2024:1823, RHSA-2024:1825, RHSA-2024:1827, RHSA-2024:1820,
Bugzilla: 2274975
Bugzilla Description: OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708)
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-350
Affected Packages: java-17-openjdk-1:17.0.11.0.9-1.el8_4,Linux,java-17-openjdk-1:17.0.11.0.9-1.el9_0,java-17-openjdk-1:17.0.11.0.9-1.el8_6,java-17-openjdk-1:17.0.11.0.9-2.el8,java-17-openjdk-1:17.0.11.0.9-2.el9,Windows,
Package States: Red Hat build of OpenJDK 11,Red Hat build of OpenJDK 1.8,Red Hat build of OpenJDK 1.8,Red Hat build of OpenJDK 21,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-21011
Severity: moderate
Released on: 16/04/2024
Advisory: RHSA-2024:1824, RHSA-2024:1823, RHSA-2024:1815, RHSA-2024:1825, RHSA-2024:1817, RHSA-2024:1827, RHSA-2024:1816, RHSA-2024:1820,
Bugzilla: 2274977
Bugzilla Description: OpenJDK: long Exception message leading to crash (8319851)
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-117
Affected Packages: java-17-openjdk-1:17.0.11.0.9-1.el8_4,java-1.8.0-openjdk-1:1.8.0.412.b08-1.el7_9,Linux,java-17-openjdk-1:17.0.11.0.9-1.el9_0,java-17-openjdk-1:17.0.11.0.9-1.el8_6,java-17-openjdk-1:17.0.11.0.9-2.el8,java-17-openjdk-1:17.0.11.0.9-2.el9,Windows,
Package States: Red Hat build of OpenJDK 11,Red Hat build of OpenJDK 21,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-21085
Severity: moderate
Released on: 16/04/2024
Advisory: RHSA-2024:1815, RHSA-2024:1817, RHSA-2024:1816, RHSA-2024:1820,
Bugzilla: 2275001
Bugzilla Description: OpenJDK: Pack200 excessive memory allocation (8322114)
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-789
Affected Packages: java-1.8.0-openjdk-1:1.8.0.412.b08-1.el7_9,Linux,Windows,
Package States: Red Hat build of OpenJDK 11,Red Hat build of OpenJDK 17,Red Hat build of OpenJDK 17,Red Hat build of OpenJDK 21,Red Hat build of OpenJDK 21,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-21068
Severity: moderate
Released on: 16/04/2024
Advisory: RHSA-2024:1824, RHSA-2024:1823, RHSA-2024:1815, RHSA-2024:1825, RHSA-2024:1817, RHSA-2024:1827, RHSA-2024:1816, RHSA-2024:1820,
Bugzilla: 2275003
Bugzilla Description: OpenJDK: integer overflow in C1 compiler address generation (8322122)
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-190->CWE-787
Affected Packages: java-17-openjdk-1:17.0.11.0.9-1.el8_4,java-1.8.0-openjdk-1:1.8.0.412.b08-1.el7_9,Linux,java-17-openjdk-1:17.0.11.0.9-1.el9_0,java-17-openjdk-1:17.0.11.0.9-1.el8_6,java-17-openjdk-1:17.0.11.0.9-2.el8,java-17-openjdk-1:17.0.11.0.9-2.el9,Windows,
Package States: Red Hat build of OpenJDK 11,Red Hat build of OpenJDK 21,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-21094
Severity: moderate
Released on: 16/04/2024
Advisory: RHSA-2024:1824, RHSA-2024:1823, RHSA-2024:1815, RHSA-2024:1825, RHSA-2024:1817, RHSA-2024:1816, RHSA-2024:1820,
Bugzilla: 2275005
Bugzilla Description: OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507)
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-787
Affected Packages: java-17-openjdk-1:17.0.11.0.9-1.el8_4,java-1.8.0-openjdk-1:1.8.0.412.b08-1.el7_9,Linux,java-17-openjdk-1:17.0.11.0.9-1.el9_0,java-17-openjdk-1:17.0.11.0.9-1.el8_6,java-17-openjdk-1:17.0.11.0.9-2.el8,java-17-openjdk-1:17.0.11.0.9-2.el9,Windows,
Package States: Red Hat build of OpenJDK 11,Red Hat build of OpenJDK 21,Red Hat build of OpenJDK 21,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-3177
Severity: low
Released on: 16/04/2024
Advisory:
Bugzilla: 2274118
Bugzilla Description: kubernetes: kube-apiserver: bypassing mountable secrets policy imposed by the ServiceAccount admission plugin
CVSS Score:
CVSSv3 Score: 2.7
Vector:
CWE: CWE-213
Affected Packages:
Package States: Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2023-0657
Severity: low
Released on: 16/04/2024
Advisory: RHSA-2024:1868, RHSA-2024:1867,
Bugzilla: 2166728
Bugzilla Description: keycloak: impersonation via logout token exchange
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-273
Affected Packages: keycloak,rhbk/keycloak-operator-bundle:22.0.10-1,rhbk/keycloak-rhel9:22-13,rhbk/keycloak-rhel9-operator:22-16,
Package States: Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2023-3758
Severity: moderate
Released on: 16/04/2024
Advisory:
Bugzilla: 2223762
Bugzilla Description: sssd: Race condition during authorization leads to GPO policies functioning inconsistently
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-362->CWE-285
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Virtualization 4,
Full Details
CVE document

CVE-2023-6544
Severity: moderate
Released on: 16/04/2024
Advisory: RHSA-2024:1868, RHSA-2024:1867, RHSA-2024:1860, RHSA-2024:1862, RHSA-2024:1861, RHSA-2024:1864, RHSA-2024:1866,
Bugzilla: 2253116
Bugzilla Description: keycloak: Authorization Bypass
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-625
Affected Packages: rhbk/keycloak-operator-bundle:22.0.10-1,rhbk/keycloak-rhel9:22-13,rhbk/keycloak-rhel9-operator:22-16,rh-sso-7/sso76-openshift-rhel8:7.6-46,keycloak-core,rh-sso7-keycloak-0:18.0.13-1.redhat_00001.1.el8sso,rh-sso7-keycloak-0:18.0.13-1.redhat_00001.1.el9sso,rh-sso7-keycloak-0:18.0.13-1.redhat_00001.1.el7sso,
Package States:
Full Details
CVE document

CVE-2023-6717
Severity: moderate
Released on: 16/04/2024
Advisory: RHSA-2024:1868, RHSA-2024:1867,
Bugzilla: 2253952
Bugzilla Description: keycloak: XSS via assertion consumer service URL in SAML POST-binding flow
CVSS Score:
CVSSv3 Score: 6.0
Vector:
CWE: CWE-79
Affected Packages: keycloak,rhbk/keycloak-operator-bundle:22.0.10-1,rhbk/keycloak-rhel9:22-13,rhbk/keycloak-rhel9-operator:22-16,
Package States: Migration Toolkit for Applications 6,Migration Toolkit for Applications 7,OpenShift Serverless,Red Hat build of Quarkus,Red Hat Data Grid 8,Red Hat Decision Manager 7,Red Hat Developer Hub,Red Hat Integration Service Registry,Red Hat JBoss A-MQ 7,Red Hat JBoss Data Grid 7,Red Hat JBoss Enterprise Application Platform 6,Red Hat JBoss Enterprise Application Platform 6,Red Hat JBoss Enterprise Application Platform 6,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Fuse 7,Red Hat OpenShift GitOps,Red Hat Process Automation 7,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2024-1132
Severity: important
Released on: 16/04/2024
Advisory: RHSA-2024:1868, RHSA-2024:1867, RHSA-2024:1860, RHSA-2024:1862, RHSA-2024:1861, RHSA-2024:1864, RHSA-2024:1866,
Bugzilla: 2262117
Bugzilla Description: keycloak: path transversal in redirection validation
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-22
Affected Packages: keycloak,rhbk/keycloak-operator-bundle:22.0.10-1,rhbk/keycloak-rhel9:22-13,rhbk/keycloak-rhel9-operator:22-16,rh-sso-7/sso76-openshift-rhel8:7.6-46,rh-sso7-keycloak-0:18.0.13-1.redhat_00001.1.el8sso,rh-sso7-keycloak-0:18.0.13-1.redhat_00001.1.el9sso,rh-sso7-keycloak-0:18.0.13-1.redhat_00001.1.el7sso,
Package States: Migration Toolkit for Applications 6,Migration Toolkit for Runtimes,Red Hat build of Quarkus,Red Hat Data Grid 8,Red Hat Decision Manager 7,Red Hat Integration Service Registry,Red Hat JBoss A-MQ 7,Red Hat JBoss Data Grid 7,Red Hat JBoss Enterprise Application Platform 6,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Fuse 7,Red Hat Process Automation 7,
Full Details
CVE document

CVE-2024-1249
Severity: important
Released on: 16/04/2024
Advisory: RHSA-2024:1868, RHSA-2024:1867, RHSA-2024:1860, RHSA-2024:1862, RHSA-2024:1861, RHSA-2024:1864, RHSA-2024:1866,
Bugzilla: 2262918
Bugzilla Description: keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginIframe leads to DDoS
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-346
Affected Packages: rhbk/keycloak-operator-bundle:22.0.10-1,rhbk/keycloak-rhel9:22-13,rhbk/keycloak-rhel9-operator:22-16,rh-sso-7/sso76-openshift-rhel8:7.6-46,rh-sso7-keycloak-0:18.0.13-1.redhat_00001.1.el8sso,rh-sso7-keycloak-0:18.0.13-1.redhat_00001.1.el9sso,rh-sso7-keycloak-0:18.0.13-1.redhat_00001.1.el7sso,
Package States: Migration Toolkit for Applications 6,Migration Toolkit for Applications 7,OpenShift Serverless,Red Hat Data Grid 8,Red Hat Decision Manager 7,Red Hat Developer Hub,Red Hat Integration Service Registry,Red Hat JBoss A-MQ 7,Red Hat JBoss A-MQ Streams,Red Hat JBoss Data Grid 7,Red Hat JBoss Enterprise Application Platform 6,Red Hat JBoss Enterprise Application Platform 6,Red Hat JBoss Enterprise Application Platform 6,Red Hat JBoss Enterprise Application Platform 6,Red Hat JBoss Enterprise Application Platform 6,Red Hat JBoss Enterprise Application Platform 6,Red Hat JBoss Enterprise Application Platform 6,Red Hat JBoss Enterprise Application Platform 6,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Fuse 7,Red Hat Process Automation 7,
Full Details
CVE document

CVE-2024-2419
Severity: important
Released on: 16/04/2024
Advisory: RHSA-2024:1867,
Bugzilla: 2269371
Bugzilla Description: keycloak: path traversal in the redirect validation
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-601
Affected Packages: rhbk/keycloak-operator-bundle:22.0.10-1,rhbk/keycloak-rhel9:22-13,rhbk/keycloak-rhel9-operator:22-16,
Package States:
Full Details
CVE document

CVE-2024-22262
Severity: important
Released on: 16/04/2024
Advisory:
Bugzilla: 2275257
Bugzilla Description: springframework: URL Parsing with Host Validation
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-601
Affected Packages:
Package States: A-MQ Clients 2,Red Hat build of Apache Camel 4.0 for Spring Boot,Red Hat build of Apache Camel for Spring Boot,Red Hat build of Apache Camel - HawtIO,Red Hat Build of Keycloak,Red Hat build of OptaPlanner 8,Red Hat Integration Camel K,Red Hat JBoss A-MQ 7,Red Hat JBoss A-MQ Streams,Red Hat JBoss Fuse 7,Red Hat Process Automation 7,Red Hat Single Sign-On 7,Red Hat support for Spring Boot,
Full Details
CVE document

CVE-2024-3852
Severity: important
Released on: 16/04/2024
Advisory: RHSA-2024:1904,
Bugzilla: 2275547
Bugzilla Description: Mozilla: GetBoundName in the JIT returned the wrong object
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-843
Affected Packages: firefox-0:115.10.0-1.el8_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-3854
Severity: important
Released on: 16/04/2024
Advisory: RHSA-2024:1904,
Bugzilla: 2275549
Bugzilla Description: Mozilla: Out-of-bounds-read after mis-optimized switch statement
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-125
Affected Packages: firefox-0:115.10.0-1.el8_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-3857
Severity: important
Released on: 16/04/2024
Advisory: RHSA-2024:1904,
Bugzilla: 2275550
Bugzilla Description: Mozilla: Incorrect JITting of arguments led to use-after-free during garbage collection
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-416
Affected Packages: firefox-0:115.10.0-1.el8_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-2609
Severity: moderate
Released on: 16/04/2024
Advisory: RHSA-2024:1904,
Bugzilla: 2275551
Bugzilla Description: Mozilla: Permission prompt input delay could expire when not in focus
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-356
Affected Packages: firefox-0:115.10.0-1.el8_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-3859
Severity: moderate
Released on: 16/04/2024
Advisory: RHSA-2024:1904,
Bugzilla: 2275552
Bugzilla Description: Mozilla: Integer-overflow led to out-of-bounds-read in the OpenType sanitizer
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-190->CWE-125
Affected Packages: firefox-0:115.10.0-1.el8_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-3861
Severity: moderate
Released on: 16/04/2024
Advisory: RHSA-2024:1904,
Bugzilla: 2275553
Bugzilla Description: Mozilla: Potential use-after-free due to AlignedBuffer self-move
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-416
Affected Packages: firefox-0:115.10.0-1.el8_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-3864
Severity: important
Released on: 16/04/2024
Advisory: RHSA-2024:1904,
Bugzilla: 2275555
Bugzilla Description: Mozilla: Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-120
Affected Packages: firefox-0:115.10.0-1.el8_2,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-3597
Severity: moderate
Released on: 15/04/2024
Advisory: RHSA-2024:1868, RHSA-2024:1867,
Bugzilla: 2221760
Bugzilla Description: keycloak: secondary factor bypass in step-up authentication
CVSS Score:
CVSSv3 Score: 5.0
Vector:
CWE: CWE-287
Affected Packages: keycloak,rhbk/keycloak-operator-bundle:22.0.10-1,rhbk/keycloak-rhel9:22-13,rhbk/keycloak-rhel9-operator:22-16,
Package States: Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2024-3652
Severity: moderate
Released on: 15/04/2024
Advisory:
Bugzilla: 2274448
Bugzilla Description: libreswan: IKEv1 default AH/ESP responder can crash and restart
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-3772
Severity: moderate
Released on: 15/04/2024
Advisory:
Bugzilla: 2275106
Bugzilla Description: python-pydantic: regular expression denial of service via crafted email string
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2024-31990
Severity: moderate
Released on: 15/04/2024
Advisory:
Bugzilla: 2275189
Bugzilla Description: argo-cd: API server does not enforce project sourceNamespaces
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-863
Affected Packages:
Package States: Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,
Full Details
CVE document

CVE-2024-1135
Severity: important
Released on: 15/04/2024
Advisory:
Bugzilla: 2275280
Bugzilla Description: python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-444
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Discovery,Red Hat Enterprise Linux 7,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 16.1,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Storage 3,Red Hat Update Infrastructure 4 for Cloud Providers,
Full Details
CVE document

CVE-2024-32487
Severity: important
Released on: 13/04/2024
Advisory:
Bugzilla: 2274980
Bugzilla Description: less: OS command injection
CVSS Score:
CVSSv3 Score: 8.6
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26817
Severity: moderate
Released on: 13/04/2024
Advisory:
Bugzilla: 2274989
Bugzilla Description: kernel: amdkfd: use calloc instead of kzalloc to avoid integer overflow
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-3651
Severity: moderate
Released on: 12/04/2024
Advisory:
Bugzilla: 2274779
Bugzilla Description: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat Ansible Automation Platform 1.2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 3.11,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Software Collections,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 4 for Cloud Providers,
Full Details
CVE document

CVE-2024-2397
Severity: low
Released on: 12/04/2024
Advisory:
Bugzilla: 2274792
Bugzilla Description: tcpdump: Crafted .pcap file may lead to Denial of Service
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-28869
Severity: moderate
Released on: 12/04/2024
Advisory:
Bugzilla: 2274987
Bugzilla Description: traefik: denial of service
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-755
Affected Packages:
Package States: Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2024-2756
Severity: moderate
Released on: 12/04/2024
Advisory:
Bugzilla: 2275058
Bugzilla Description: php: host/secure cookie bypass due to partial CVE-2022-31629 fix
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-3096
Severity: low
Released on: 12/04/2024
Advisory:
Bugzilla: 2275061
Bugzilla Description: php: password_verify can erroneously return true, opening ATO risk
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-626
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-2757
Severity: moderate
Released on: 12/04/2024
Advisory:
Bugzilla: 2275068
Bugzilla Description: php: mb_encode_mimeheader runs endlessly for some inputs
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-21508
Severity: important
Released on: 11/04/2024
Advisory:
Bugzilla: 2274446
Bugzilla Description: mysql2: Remote Code Execution
CVSS Score:
CVSSv3 Score: 9.8
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,
Full Details
CVE document

CVE-2024-3622
Severity: important
Released on: 10/04/2024
Advisory:
Bugzilla: 2274400
Bugzilla Description: mirror-registry: Plain-text default CSRF secret key
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-256
Affected Packages:
Package States: mirror registry for Red Hat OpenShift,
Full Details
CVE document

CVE-2024-3623
Severity: important
Released on: 10/04/2024
Advisory:
Bugzilla: 2274404
Bugzilla Description: mirror-registry: Default database secret key stored in plain-text on initial configuration file
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-256
Affected Packages:
Package States: mirror registry for Red Hat OpenShift,
Full Details
CVE document

CVE-2024-3624
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274407
Bugzilla Description: mirror-registry: Database user and password stored in plain-text
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-256
Affected Packages:
Package States: mirror registry for Red Hat OpenShift,
Full Details
CVE document

CVE-2024-3625
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274408
Bugzilla Description: mirror-registry: Redis password stored in plain-text
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-256
Affected Packages:
Package States: mirror registry for Red Hat OpenShift,
Full Details
CVE document

CVE-2024-21507
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274444
Bugzilla Description: mysql2: Improper Input Validation
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,
Full Details
CVE document

CVE-2024-26816
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274474
Bugzilla Description: kernel: x86, relocs: Ignore relocations in .notes section
CVSS Score:
CVSSv3 Score: 6.0
Vector:
CWE: CWE-212
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26815
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274478
Bugzilla Description: kernel: net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-21509
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274489
Bugzilla Description: mysql2: Prototype Poisoning
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1321
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,
Full Details
CVE document

CVE-2024-23076
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274494
Bugzilla Description: jfreechart: Null pointer exception
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-754
Affected Packages:
Package States: OpenShift Developer Tools and Services,Red Hat Build of Keycloak,Red Hat build of OptaPlanner 8,Red Hat build of Quarkus,Red Hat Data Grid 8,Red Hat Integration Camel K,Red Hat JBoss A-MQ 7,Red Hat JBoss A-MQ Streams,Red Hat JBoss Data Grid 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Fuse 7,Red Hat JBoss Web Server 6,Red Hat JBoss Web Server 6,Red Hat OpenShift Container Platform 3.11,Red Hat Process Automation 7,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2024-29903
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274504
Bugzilla Description: cosign: Malicious artifects can cause machine-wide denial of service
CVSS Score:
CVSSv3 Score: 4.2
Vector:
CWE: CWE-770
Affected Packages:
Package States: OpenShift Pipelines,Red Hat Advanced Cluster Security 3,Red Hat Advanced Cluster Security 4,
Full Details
CVE document

CVE-2024-29902
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274508
Bugzilla Description: cosign: Malicious attachments can cause system-wide denial of service
CVSS Score:
CVSSv3 Score: 4.2
Vector:
CWE: CWE-770
Affected Packages:
Package States: OpenShift Pipelines,Red Hat Advanced Cluster Security 3,Red Hat Advanced Cluster Security 4,
Full Details
CVE document

CVE-2024-23080
Severity:
Released on: 10/04/2024
Advisory:
Bugzilla: 2274516
Bugzilla Description: joda-time: Null pointer exeption may lead to DoS
CVSS Score:
Vector:
CWE: CWE-476
Affected Packages:
Package States: A-MQ Clients 2,Logging Subsystem for Red Hat OpenShift,Migration Toolkit for Applications 6,Migration Toolkit for Runtimes,OpenShift Developer Tools and Services,OpenShift Serverless,Red Hat build of Apache Camel 4.0 for Spring Boot,Red Hat build of Apache Camel for Quarkus,Red Hat build of Apache Camel for Spring Boot,Red Hat Build of Keycloak,Red Hat build of OptaPlanner 8,Red Hat Data Grid 8,Red Hat Enterprise Linux 7,Red Hat Integration Camel K,Red Hat Integration Camel Quarkus,Red Hat Integration Change Data Capture,Red Hat Integration Service Registry,Red Hat JBoss A-MQ 7,Red Hat JBoss A-MQ Streams,Red Hat JBoss Data Grid 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Fuse 7,Red Hat JBoss Fuse Service Works 6,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat Process Automation 7,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Single Sign-On 7,Red Hat Software Collections,
Full Details
CVE document

CVE-2021-47219
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274567
Bugzilla Description: kernel: scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
CVSS Score:
CVSSv3 Score: 6.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47218
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274568
Bugzilla Description: kernel: selinux: fix NULL-pointer dereference when hashtab allocation fails
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47216
Severity: low
Released on: 10/04/2024
Advisory:
Bugzilla: 2274569
Bugzilla Description: kernel: scsi: advansys: Fix kernel pointer leak
CVSS Score:
CVSSv3 Score: 5.1
Vector:
CWE: CWE-402
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47215
Severity: low
Released on: 10/04/2024
Advisory:
Bugzilla: 2274571
Bugzilla Description: kernel: net/mlx5e: kTLS, Fix crash in RX resync flow
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47214
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274572
Bugzilla Description: kernel: hugetlb, userfaultfd: fix reservation restore on userfaultfd error
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-402
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47213
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274573
Bugzilla Description: kernel: NFSD: Fix exposure in nfsd4_decode_bitmap()
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-402
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47212
Severity: low
Released on: 10/04/2024
Advisory:
Bugzilla: 2274574
Bugzilla Description: kernel: net/mlx5: Update error handler for UCTX and UMEM
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47211
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274575
Bugzilla Description: kernel: ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47210
Severity: low
Released on: 10/04/2024
Advisory:
Bugzilla: 2274576
Bugzilla Description: kernel: usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47209
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274577
Bugzilla Description: kernel: sched/fair: Prevent dead task groups from regaining cfs_rq's
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47217
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274604
Bugzilla Description: kernel: x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47202
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274607
Bugzilla Description: kernel: thermal: Fix NULL pointer dereferences in of_thermal_ functions
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47201
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274608
Bugzilla Description: kernel: iavf: free q_vectors before queues in iavf_disable_vf
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47200
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274609
Bugzilla Description: kernel: drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47199
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274610
Bugzilla Description: kernel: net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47198
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274611
Bugzilla Description: kernel: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47197
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274612
Bugzilla Description: kernel: net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47196
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274613
Bugzilla Description: kernel: RDMA/core: Set send and receive CQ before forwarding to the driver
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47195
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274614
Bugzilla Description: kernel: spi: fix use-after-free of the add_lock mutex
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47194
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274615
Bugzilla Description: kernel: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47193
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274616
Bugzilla Description: kernel: scsi: pm80xx: Fix memory leak during rmmod
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47192
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274617
Bugzilla Description: kernel: scsi: core: sysfs: Fix hang when device state is set via sysfs
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47191
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274618
Bugzilla Description: kernel: scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47190
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274619
Bugzilla Description: kernel: perf bpf: Avoid memory leak from perf_env__insert_btf()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47189
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274620
Bugzilla Description: kernel: btrfs: fix memory ordering between normal and ordered work functions
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47188
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274621
Bugzilla Description: kernel: scsi: ufs: core: Improve SCSI abort handling
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47187
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274622
Bugzilla Description: kernel: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47186
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274623
Bugzilla Description: kernel: tipc: check for null after calling kmemdup
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47185
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274624
Bugzilla Description: kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47184
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274625
Bugzilla Description: kernel: i40e: Fix NULL ptr dereference on VSI filter sync
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47183
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274626
Bugzilla Description: kernel: scsi: lpfc: Fix link down processing to address NULL pointer dereference
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47182
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274627
Bugzilla Description: kernel: scsi: core: Fix scsi_mode_sense() buffer length handling
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47181
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274628
Bugzilla Description: kernel: usb: musb: tusb6010: check return value after calling platform_get_resource()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47207
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274630
Bugzilla Description: kernel: ALSA: gus: fix null pointer dereference on pointer block
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47206
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274631
Bugzilla Description: kernel: usb: host: ohci-tmio: check return value after calling platform_get_resource()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47205
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274632
Bugzilla Description: kernel: clk: sunxi-ng: Unregister clocks/resets when unbinding
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47204
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274633
Bugzilla Description: kernel: net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2021-47203
Severity: moderate
Released on: 10/04/2024
Advisory:
Bugzilla: 2274634
Bugzilla Description: kernel: scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-24576
Severity: low
Released on: 09/04/2024
Advisory:
Bugzilla: 2265585
Bugzilla Description: rust: Fail to Escape Arguments Properly in Microsoft Windows
CVSS Score:
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-2905
Severity: moderate
Released on: 09/04/2024
Advisory:
Bugzilla: 2271585
Bugzilla Description: rpm-ostree: world-readable /etc/shadow file
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-732
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-2201
Severity: moderate
Released on: 09/04/2024
Advisory:
Bugzilla: 2268118
Bugzilla Description: hw: cpu: intel:InSpectre Gadget a residual Attack Surface of Cross-privilege Spectre v2
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-1874
Severity:
Released on: 09/04/2024
Advisory:
Bugzilla: 2267262
Bugzilla Description: php: Fail to Escape Arguments Properly in Microsoft Windows
CVSS Score:
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-27980
Severity:
Released on: 09/04/2024
Advisory:
Bugzilla: 2270693
Bugzilla Description: Node.js: Fail to Escape Arguments Properly in Microsoft Windows
CVSS Score:
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-21409
Severity: moderate
Released on: 09/04/2024
Advisory:
Bugzilla: 2273484
Bugzilla Description: dotnet: Release COM server object when CPimcManager creation fails
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-416
Affected Packages:
Package States: .NET 6.0 on Red Hat Enterprise Linux,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-3508
Severity: moderate
Released on: 09/04/2024
Advisory:
Bugzilla: 2274109
Bugzilla Description: bzip2: Compressed Content Bomb Leads to Denial of Service of Bombastic API
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE:
Affected Packages:
Package States: Red Hat Trusted Profile Analyzer,
Full Details
CVE document

CVE-2024-26811
Severity: moderate
Released on: 08/04/2024
Advisory:
Bugzilla: 2273967
Bugzilla Description: kernel: ksmbd: validate payload size in ipc response
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-2511
Severity: low
Released on: 08/04/2024
Advisory:
Bugzilla: 2274020
Bugzilla Description: openssl: Unbounded memory growth with session handling in TLSv1.3
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-23078
Severity: moderate
Released on: 08/04/2024
Advisory:
Bugzilla: 2274095
Bugzilla Description: jgrapht-core: Null Pointer Exception
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-395
Affected Packages:
Package States: Migration Toolkit for Applications 6,Migration Toolkit for Runtimes,Red Hat build of Quarkus,Red Hat Process Automation 7,
Full Details
CVE document

CVE-2024-23081
Severity: moderate
Released on: 08/04/2024
Advisory:
Bugzilla: 2274197
Bugzilla Description: threetenbp: null pointer exception
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-754
Affected Packages:
Package States: Logging Subsystem for Red Hat OpenShift,OpenShift Serverless,Red Hat build of Apache Camel 4.0 for Spring Boot,Red Hat build of Apache Camel for Quarkus,Red Hat build of Apache Camel for Spring Boot,Red Hat build of Quarkus,Red Hat Data Grid 8,Red Hat Integration Camel K,Red Hat Integration Camel Quarkus,Red Hat JBoss A-MQ Streams,Red Hat JBoss Data Grid 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Fuse 7,Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2024-23079
Severity: moderate
Released on: 08/04/2024
Advisory:
Bugzilla: 2274203
Bugzilla Description: jgrapht: null pointer exception
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-754
Affected Packages:
Package States: Migration Toolkit for Applications 6,Migration Toolkit for Runtimes,Red Hat build of Quarkus,Red Hat JBoss Data Grid 7,Red Hat JBoss Fuse 7,Red Hat Process Automation 7,
Full Details
CVE document

CVE-2024-3567
Severity: moderate
Released on: 08/04/2024
Advisory:
Bugzilla: 2274339
Bugzilla Description: QEMU: net: assertion failure in update_sctp_checksum()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8 Advanced Virtualization,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-31948
Severity: moderate
Released on: 07/04/2024
Advisory:
Bugzilla: 2273982
Bugzilla Description: frr: bgpd daemon crash
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-248
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-31949
Severity: moderate
Released on: 07/04/2024
Advisory:
Bugzilla: 2273992
Bugzilla Description: frr: infinite loop
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-31950
Severity: important
Released on: 07/04/2024
Advisory:
Bugzilla: 2273995
Bugzilla Description: frr: buffer overflow and daemon crash in ospf_te_parse_ri
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-121
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-31951
Severity: important
Released on: 07/04/2024
Advisory:
Bugzilla: 2273999
Bugzilla Description: frr: buffer overflow in ospf_te_parse_ext_link
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-121
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-21506
Severity: moderate
Released on: 06/04/2024
Advisory:
Bugzilla: 2273859
Bugzilla Description: python-pymongo: out of bounds read
CVSS Score:
CVSSv3 Score: 5.2
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat OpenStack Platform 16.1,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Satellite 6,
Full Details
CVE document

CVE-2024-25742
Severity: moderate
Released on: 05/04/2024
Advisory:
Bugzilla: 2270836
Bugzilla Description: hw: amd: Instruction raise #VC exception at exit
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-25743
Severity: moderate
Released on: 05/04/2024
Advisory:
Bugzilla: 2270836
Bugzilla Description: hw: amd: Instruction raise #VC exception at exit
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26814
Severity: low
Released on: 05/04/2024
Advisory:
Bugzilla: 2273646
Bugzilla Description: kernel: vfio/fsl-mc: Block calling interrupt handler without trigger
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26813
Severity: low
Released on: 05/04/2024
Advisory:
Bugzilla: 2273648
Bugzilla Description: kernel: vfio/platform: Create persistent IRQ handlers
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26812
Severity: moderate
Released on: 05/04/2024
Advisory:
Bugzilla: 2273650
Bugzilla Description: kernel: vfio/pci: Create persistent INTx handler
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26810
Severity: low
Released on: 05/04/2024
Advisory:
Bugzilla: 2273654
Bugzilla Description: kernel: vfio/pci: Lock external INTx masking ops
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-362
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-27437
Severity: low
Released on: 05/04/2024
Advisory:
Bugzilla: 2273657
Bugzilla Description: kernel: vfio/pci: Disable auto-enable of exclusive INTx IRQ
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-31852
Severity: moderate
Released on: 05/04/2024
Advisory:
Bugzilla: 2273715
Bugzilla Description: llvm: LR register can be overwritten without data being saved to the stack on ARM
CVSS Score:
CVSSv3 Score: 4.2
Vector:
CWE: CWE-440
Affected Packages:
Package States: Red Hat Developer Tools,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-2312
Severity: moderate
Released on: 05/04/2024
Advisory:
Bugzilla: 2273912
Bugzilla Description: grub2: grub-efi crashes upon `exit`
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-1973
Severity: important
Released on: 04/04/2024
Advisory: RHSA-2024:1675, RHSA-2024:1674, RHSA-2024:1677, RHSA-2024:1676,
Bugzilla: 2185662
Bugzilla Description: undertow: unrestricted request storage leads to memory exhaustion
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-20
Affected Packages: eap7-jboss-annotations-api_1.3_spec-0:2.0.1-3.Final_redhat_00001.1.el8eap,eap7-undertow-0:2.2.30-1.SP1_redhat_00001.1.el8eap,eap7-hibernate-0:5.3.36-1.Final_redhat_00001.1.el9eap,eap7-jboss-cert-helper-0:1.1.2-1.redhat_00001.1.el9eap,eap7-wildfly-0:7.4.16-4.GA_redhat_00002.1.el9eap,eap7-lucene-solr-0:5.5.5-6.redhat_2.1.el7eap,eap7-insights-java-client-0:1.1.2-1.redhat_00001.1.el8eap,eap7-apache-cxf-0:3.4.10-2.redhat_00001.1.el9eap,eap7-eclipse-jgit-0:5.13.3.202401111512-1.r_redhat_00001.1.el9eap,eap7-elytron-web-0:1.9.4-1.Final_redhat_00001.1.el9eap,eap7-jgroups-kubernetes-0:1.0.17-1.Final_redhat_00001.1.el8eap,eap7-jboss-server-migration-0:1.10.0-35.Final_redhat_00034.1.el9eap,eap7-wildfly-elytron-0:1.15.22-1.Final_redhat_00001.1.el8eap,eap7-activemq-artemis-0:2.16.0-18.redhat_00052.1.el7eap,eap7-undertow-0:2.2.30-1.SP1_redhat_00001.1.el7eap,eap7-jboss-annotations-api_1.3_spec-0:2.0.1-3.Final_redhat_00001.1.el7eap,eap7-hal-console-0:3.3.21-1.Final_redhat_00001.1.el7eap,eap7-jboss-cert-helper-0:1.1.2-1.redhat_00001.1.el8eap,eap7-lucene-solr-0:5.5.5-6.redhat_2.1.el8eap,eap7-infinispan-0:11.0.18-2.Final_redhat_00001.1.el9eap,eap7-wildfly-0:7.4.16-4.GA_redhat_00002.1.el8eap,eap7-insights-java-client-0:1.1.2-1.redhat_00001.1.el9eap,eap7-jberet-0:1.3.9-3.SP3_redhat_00001.1.el7eap,eap7-apache-cxf-0:3.4.10-2.redhat_00001.1.el8eap,eap7-jboss-remoting-0:5.0.27-4.SP2_redhat_00001.1.el9eap,eap7-jboss-xnio-base-0:3.8.12-1.SP2_redhat_00001.1.el7eap,eap7-elytron-web-0:1.9.4-1.Final_redhat_00001.1.el8eap,eap7-jboss-server-migration-0:1.10.0-35.Final_redhat_00034.1.el8eap,eap7-wildfly-elytron-0:1.15.22-1.Final_redhat_00001.1.el7eap,eap7-hibernate-0:5.3.36-1.Final_redhat_00001.1.el7eap,eap7-jgroups-kubernetes-0:1.0.17-1.Final_redhat_00001.1.el7eap,eap7-eclipse-jgit-0:5.13.3.202401111512-1.r_redhat_00001.1.el7eap,eap7-hal-console-0:3.3.21-1.Final_redhat_00001.1.el8eap,eap7-jboss-remoting-0:5.0.27-4.SP2_redhat_00001.1.el8eap,eap7-lucene-solr-0:5.5.5-6.redhat_2.1.el9eap,eap7-wildfly-0:7.4.16-4.GA_redhat_00002.1.el7eap,eap7-infinispan-0:11.0.18-2.Final_redhat_00001.1.el8eap,eap7-jberet-0:1.3.9-3.SP3_redhat_00001.1.el8eap,eap7-jboss-xnio-base-0:3.8.12-1.SP2_redhat_00001.1.el8eap,eap7-elytron-web-0:1.9.4-1.Final_redhat_00001.1.el7eap,eap7-jboss-server-migration-0:1.10.0-35.Final_redhat_00034.1.el7eap,eap7-activemq-artemis-0:2.16.0-18.redhat_00052.1.el9eap,eap7-apache-cxf-0:3.4.10-2.redhat_00001.1.el7eap,eap7-jberet-0:1.3.9-3.SP3_redhat_00001.1.el9eap,undertow,eap7-jboss-annotations-api_1.3_spec-0:2.0.1-3.Final_redhat_00001.1.el9eap,eap7-hibernate-0:5.3.36-1.Final_redhat_00001.1.el8eap,eap7-undertow-0:2.2.30-1.SP1_redhat_00001.1.el9eap,eap7-hal-console-0:3.3.21-1.Final_redhat_00001.1.el9eap,eap7-jboss-remoting-0:5.0.27-4.SP2_redhat_00001.1.el7eap,eap7-insights-java-client-0:1.1.2-1.redhat_00001.1.el7eap,eap7-infinispan-0:11.0.18-2.Final_redhat_00001.1.el7eap,eap7-jboss-xnio-base-0:3.8.12-1.SP2_redhat_00001.1.el9eap,eap7-eclipse-jgit-0:5.13.3.202401111512-1.r_redhat_00001.1.el8eap,eap7-jgroups-kubernetes-0:1.0.17-1.Final_redhat_00001.1.el9eap,eap7-wildfly-elytron-0:1.15.22-1.Final_redhat_00001.1.el9eap,eap7-jboss-cert-helper-0:1.1.2-1.redhat_00001.1.el7eap,eap7-activemq-artemis-0:2.16.0-18.redhat_00052.1.el8eap,
Package States: Red Hat JBoss Enterprise Application Platform 8,
Full Details
CVE document

CVE-2024-26750
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273368
Bugzilla Description: kernel: af_unix: Drop oob_skb ref before purging queue in GC.
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26809
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273402
Bugzilla Description: kernel: netfilter: nft_set_pipapo: release elements in clone only from destroy path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26808
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273405
Bugzilla Description: kernel: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26746
Severity: low
Released on: 04/04/2024
Advisory:
Bugzilla: 2273408
Bugzilla Description: kernel: dmaengine: idxd: Ensure safe user copy of completion record
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26745
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273410
Bugzilla Description: kernel: powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26807
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273416
Bugzilla Description: kernel: spi: cadence-qspi: fix pointer reference in runtime PM hooks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26806
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273419
Bugzilla Description: kernel: spi: cadence-qspi: remove system-wide suspend helper calls from runtime PM hooks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26805
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273421
Bugzilla Description: kernel: netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26804
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273423
Bugzilla Description: kernel: net: ip_tunnel: prevent perpetual headroom growth
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26803
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273425
Bugzilla Description: kernel: net: veth: clear GRO when clearing XDP even when down
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26802
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273427
Bugzilla Description: kernel: stmmac: Clear variable when destroying workqueue
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26801
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273429
Bugzilla Description: kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26799
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273432
Bugzilla Description: kernel: ASoC: qcom: Fix uninitialized pointer dmactl
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26798
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273434
Bugzilla Description: kernel: fbcon: always restore the old font data in fbcon_do_set_font()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26797
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273436
Bugzilla Description: kernel: drm/amd/display: Prevent potential buffer overflow in map_hw_resources
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26796
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273438
Bugzilla Description: kernel: drivers: perf: ctr_get_width function for legacy is not defined
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26795
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273440
Bugzilla Description: kernel: riscv: Sparse-Memory/vmemmap out-of-bounds fix
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26794
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273442
Bugzilla Description: kernel: btrfs: fix race between ordered extent completion and fiemap
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26793
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273444
Bugzilla Description: kernel: gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26792
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273446
Bugzilla Description: kernel: btrfs: fix double free of anonymous device after snapshot creation failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26791
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273448
Bugzilla Description: kernel: btrfs: dev-replace: properly validate device names
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26790
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273451
Bugzilla Description: kernel: dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26789
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273453
Bugzilla Description: kernel: crypto: arm64/neonbs - fix out-of-bounds access on short input
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26788
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273455
Bugzilla Description: kernel: dmaengine: fsl-qdma: init irq after reg initialization
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26787
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273457
Bugzilla Description: kernel: mmc: mmci: stm32: fix DMA API overlapping mappings warning
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26786
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273459
Bugzilla Description: kernel: iommufd: Fix iopt_access_list_id overwrite bug
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26785
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273461
Bugzilla Description: kernel: iommufd: Fix protection fault in iommufd_test_syz_conv_iova
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26784
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273464
Bugzilla Description: kernel: pmdomain: arm: Fix NULL dereference on scmi_perf_domain removal
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26783
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273466
Bugzilla Description: kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26782
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273468
Bugzilla Description: kernel: mptcp: fix double-free on socket dismantle
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26781
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273470
Bugzilla Description: kernel: mptcp: fix possible deadlock in subflow diag
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26800
Severity: low
Released on: 04/04/2024
Advisory:
Bugzilla: 2273472
Bugzilla Description: kernel: tls: fix use-after-free on failed backlog decryption
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26780
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273474
Bugzilla Description: kernel: af_unix: Fix task hung while purging oob_skb in GC.
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-38709
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273491
Bugzilla Description: httpd: HTTP response splitting
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-20->CWE-113
Affected Packages:
Package States: OpenShift Pipelines,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat JBoss Core Services,Red Hat JBoss Enterprise Application Platform 6,Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift GitOps,Red Hat OpenStack Platform 16.1,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Software Collections,
Full Details
CVE document

CVE-2024-24795
Severity: low
Released on: 04/04/2024
Advisory:
Bugzilla: 2273499
Bugzilla Description: httpd: HTTP Response Splitting in multiple modules
CVSS Score:
CVSSv3 Score: 4.0
Vector:
CWE: CWE-113
Affected Packages:
Package States: OpenShift Pipelines,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat JBoss Core Services,Red Hat JBoss Enterprise Application Platform 6,Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift GitOps,Red Hat OpenStack Platform 16.1,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Software Collections,
Full Details
CVE document

CVE-2024-22189
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273513
Bugzilla Description: quic-go: memory exhaustion attack against QUIC's connection ID mechanism
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ansible Automation Platform 2,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2024-30261
Severity: low
Released on: 04/04/2024
Advisory:
Bugzilla: 2273519
Bugzilla Description: nodejs-undici: fetch() with integrity option is too lax when algorithm is specified but hash value is in incorrect
CVSS Score:
CVSSv3 Score: 2.6
Vector:
CWE: CWE-284
Affected Packages:
Package States: Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2024-30260
Severity: low
Released on: 04/04/2024
Advisory:
Bugzilla: 2273522
Bugzilla Description: nodejs-undici: proxy-authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
CVSS Score:
CVSSv3 Score: 3.9
Vector:
CWE: CWE-285
Affected Packages:
Package States: Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2024-31207
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273531
Bugzilla Description: vitejs: "server.fs.deny" configuration does not deny requests that include patterns
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: (CWE-200|CWE-284)
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Build of Keycloak,Red Hat JBoss Enterprise Application Platform 8,
Full Details
CVE document

CVE-2024-2660
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2273634
Bugzilla Description: Vault: Vault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-703
Affected Packages:
Package States: Red Hat Openshift Container Storage 4,Red Hat Openshift Container Storage 4,Red Hat Openshift Container Storage 4,Red Hat Openshift Container Storage 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,
Full Details
CVE document

CVE-2024-3447
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2274123
Bugzilla Description: QEMU: sdhci: heap buffer overflow in sdhci_write_dataport()
CVSS Score:
CVSSv3 Score: 6.0
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8 Advanced Virtualization,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-3446
Severity: moderate
Released on: 04/04/2024
Advisory:
Bugzilla: 2274211
Bugzilla Description: QEMU: virtio: DMA reentrancy issue leads to double free vulnerability
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-415
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8 Advanced Virtualization,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-1139
Severity: important
Released on: 03/04/2024
Advisory:
Bugzilla: 2262158
Bugzilla Description: cluster-monitoring-operator: credentials leak
CVSS Score:
CVSSv3 Score: 7.7
Vector:
CWE: CWE-200
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2023-45288
Severity: important
Released on: 03/04/2024
Advisory: RHSA-2024:1681, RHSA-2024:1683, RHSA-2024:1679, RHSA-2024:1668,
Bugzilla: 2268273
Bugzilla Description: golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages: openshift4/ose-hyperkube:v4.12.0-202404040933.p1.gbd92d70.assembly.stream.el8,openshift4/ose-hyperkube:v4.13.0-202404040933.p1.g731fb36.assembly.stream.el8,openshift4/ose-hyperkube-rhel9:v4.14.0-202404041112.p0.gec42b99.assembly.stream.el9,openshift4/ose-hyperkube-rhel9:v4.15.0-202404031521.p1.gc1f5b34.assembly.stream.el9,
Package States: cert-manager Operator for Red Hat OpenShift,Cost Management,Cryostat 2,Custom metric autoscaler Operator for Red Hat Openshift,Fence Agents Remediation Operator,Kube Descheduler Operator,Logging Subsystem for Red Hat OpenShift,Logical Volume Manager Storage,Machine Deletion Remediation Operator,Migration Toolkit for Applications 6,Migration Toolkit for Applications 7,Migration Toolkit for Containers,Migration Toolkit for Virtualization,Multicluster Engine for Kubernetes,NBDE Tang Server,Network Observability Operator,Node HealthCheck Operator,Node Maintenance Operator,OpenShift API for Data Protection,OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Run Once Duration Override Operator,OpenShift Secondary Scheduler Operator,OpenShift Serverless,OpenShift Service Mesh 2,OpenShift Source-to-Image (S2I) Builder Image,Power monitoring for Red Hat OpenShift,Red Hat 3scale API Management Platform 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 3,Red Hat Advanced Cluster Security 4,Red Hat Ansible Automation Platform 1.2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 5,Red Hat Ceph Storage 6,Red Hat Ceph Storage 7,Red Hat Certification for Red Hat Enterprise Linux 8,Red Hat Certification for Red Hat Enterprise Linux 9,Red Hat Developer Tools,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform Assisted Installer,Red Hat Openshift Container Storage 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift distributed tracing 2,Red Hat OpenShift GitOps,Red Hat OpenShift on AWS,Red Hat Openshift sandboxed containers,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.1,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Quay 3,Red Hat Service Interconnect 1,Red Hat Software Collections,Red Hat Storage 3,Red Hat Web Terminal,Self Node Remediation Operator,Service Telemetry Framework 1.5 for RHEL 8,
Full Details
CVE document

CVE-2024-27316
Severity: moderate
Released on: 03/04/2024
Advisory: RHSA-2024:1872, RHSA-2024:1786,
Bugzilla: 2268277
Bugzilla Description: httpd: CONTINUATION frames DoS
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages: mod_http2-0:1.15.19-5.el9_3.1,httpd:2.4-8090020240405093943.a75119d5,
Package States: A-MQ Clients 2,Cryostat 2,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Migration Toolkit for Applications 6,Migration Toolkit for Runtimes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,.NET 6.0 on Red Hat Enterprise Linux,OpenShift Developer Tools and Services,OpenShift Serverless,Red Hat 3scale API Management Platform 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 3,Red Hat Advanced Cluster Security 4,Red Hat build of Apache Camel 4.0 for Spring Boot,Red Hat build of Apache Camel for Quarkus,Red Hat build of Apache Camel for Spring Boot,Red Hat build of Apache Camel - HawtIO,Red Hat Build of Keycloak,Red Hat build of OptaPlanner 8,Red Hat build of Quarkus,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Integration Camel K,Red Hat Integration Camel Quarkus,Red Hat Integration Change Data Capture,Red Hat Integration Service Registry,Red Hat JBoss A-MQ 7,Red Hat JBoss A-MQ Streams,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Data Grid 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Fuse 7,Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift GitOps,Red Hat Process Automation 7,Red Hat Process Automation 7,Red Hat Service Interconnect 1,Red Hat Single Sign-On 7,Red Hat Software Collections,Red Hat Software Collections,
Full Details
CVE document

CVE-2024-28182
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2268639
Bugzilla Description: nghttp2: CONTINUATION frames DoS
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-390
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat Software Collections,Red Hat Software Collections,
Full Details
CVE document

CVE-2024-2653
Severity: important
Released on: 03/04/2024
Advisory:
Bugzilla: 2269175
Bugzilla Description: amphp: CONTINUATION frames DoS
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages:
Package States:
Full Details
CVE document

CVE-2024-27919
Severity: important
Released on: 03/04/2024
Advisory:
Bugzilla: 2269444
Bugzilla Description: envoy: CONTINUATION frames which enable DoS
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages:
Package States: Custom metric autoscaler Operator for Red Hat Openshift,Logging Subsystem for Red Hat OpenShift,Logical Volume Manager Storage,Migration Toolkit for Applications 6,Migration Toolkit for Containers,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift Serverless,OpenShift Service Mesh 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 5,Red Hat Ceph Storage 6,Red Hat Ceph Storage 7,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Container Storage 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Dev Spaces,Red Hat OpenShift distributed tracing 2,Red Hat Openshift sandboxed containers,Red Hat OpenStack Platform 16.2,
Full Details
CVE document

CVE-2024-31309
Severity: important
Released on: 03/04/2024
Advisory:
Bugzilla: 2269627
Bugzilla Description: trafficserver: CONTINUATION frames DoS
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages:
Package States:
Full Details
CVE document

CVE-2024-31080
Severity: important
Released on: 03/04/2024
Advisory: RHSA-2024:1785,
Bugzilla: 2271997
Bugzilla Description: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-126
Affected Packages: xorg-x11-server-0:1.20.4-29.el7_9,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-31081
Severity: important
Released on: 03/04/2024
Advisory: RHSA-2024:1785,
Bugzilla: 2271998
Bugzilla Description: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-126
Affected Packages: xorg-x11-server-0:1.20.4-29.el7_9,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-31082
Severity: important
Released on: 03/04/2024
Advisory:
Bugzilla: 2271999
Bugzilla Description: xorg-x11-server: Heap buffer overread/data leakage in ProcAppleDRICreatePixmap
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-126
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-31083
Severity: important
Released on: 03/04/2024
Advisory: RHSA-2024:1785,
Bugzilla: 2272000
Bugzilla Description: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-416
Affected Packages: xorg-x11-server-0:1.20.4-29.el7_9,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-27983
Severity: important
Released on: 03/04/2024
Advisory:
Bugzilla: 2272764
Bugzilla Description: nodejs: CONTINUATION frames DoS
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-31419
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2272948
Bugzilla Description: cnv: information disclosure through the usage of vm-dump-metrics
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-497
Affected Packages:
Package States: Red Hat OpenShift Virtualization 4,
Full Details
CVE document

CVE-2024-31420
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2272951
Bugzilla Description: cnv: DoS through repeatedly calling vm-dump-metrics until virt handler crashes
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat OpenShift Virtualization 4,
Full Details
CVE document

CVE-2024-30255
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2272986
Bugzilla Description: envoy: HTTP/2 CPU exhaustion due to CONTINUATION frame flood
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-390
Affected Packages:
Package States: Custom metric autoscaler Operator for Red Hat Openshift,Logging Subsystem for Red Hat OpenShift,Logical Volume Manager Storage,Migration Toolkit for Applications 6,Migration Toolkit for Containers,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift Serverless,OpenShift Service Mesh 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 5,Red Hat Ceph Storage 6,Red Hat Ceph Storage 7,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Container Storage 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Data Science (RHODS),Red Hat OpenShift Dev Spaces,Red Hat OpenShift distributed tracing 2,Red Hat Openshift sandboxed containers,Red Hat OpenStack Platform 16.2,
Full Details
CVE document

CVE-2024-26747
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273072
Bugzilla Description: kernel: usb: roles: fix NULL pointer issue when put module's reference
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26749
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273074
Bugzilla Description: kernel: usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
CVSS Score:
CVSSv3 Score: 6.0
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26748
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273076
Bugzilla Description: kernel: usb: cdns3: fix memory double free when handle zero packet
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-415
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52639
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273080
Bugzilla Description: kernel: KVM: s390: vsie: fix race during shadow creation
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-362
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52638
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273082
Bugzilla Description: kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-833
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52637
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273085
Bugzilla Description: kernel: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52641
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273087
Bugzilla Description: kernel: fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52640
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273089
Bugzilla Description: kernel: fs/ntfs3: Fix oob in ntfs_listxattr
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26694
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273092
Bugzilla Description: kernel: wifi: iwlwifi: fix double-free bug
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-415
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26693
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273094
Bugzilla Description: kernel: wifi: iwlwifi: mvm: fix a crash when we run out of stations
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26692
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273096
Bugzilla Description: kernel: smb: Fix regression in writes when non-standard maximum write size negotiated
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26691
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273098
Bugzilla Description: kernel: KVM: arm64: Fix circular locking dependency
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26690
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273100
Bugzilla Description: kernel: net: stmmac: protect updates of 64-bit statistics counters
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26689
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273102
Bugzilla Description: kernel: ceph: prevent use-after-free in encode_cap_msg()
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26688
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273105
Bugzilla Description: kernel: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26687
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273107
Bugzilla Description: kernel: xen/events: close evtchn after mapping cleanup
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-362
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26686
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273109
Bugzilla Description: kernel: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-413
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26685
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273111
Bugzilla Description: kernel: nilfs2: fix potential bug in end_buffer_async_write
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26700
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273113
Bugzilla Description: kernel: drm/amd/display: Fix MST Null Ptr for RV
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26699
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273115
Bugzilla Description: kernel: drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26698
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273117
Bugzilla Description: kernel: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-362
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26697
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273119
Bugzilla Description: kernel: nilfs2: fix data corruption in dsync block recovery for small block sizes
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26696
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273121
Bugzilla Description: kernel: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-1246
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26695
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273123
Bugzilla Description: kernel: crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26727
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273126
Bugzilla Description: kernel: btrfs: do not ASSERT() if the newly created subvolume already got read
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26726
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273128
Bugzilla Description: kernel: btrfs: don't drop extent_map for free space inode on write error
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26725
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273130
Bugzilla Description: kernel: dpll: fix possible deadlock during netlink dump operation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26724
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273133
Bugzilla Description: kernel: net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26723
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273135
Bugzilla Description: kernel: lan966x: Fix crash when adding interface under a lag
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26722
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273137
Bugzilla Description: kernel: ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26721
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273139
Bugzilla Description: kernel: drm/i915/dsc: Fix the macro that calculates DSCC_/DSCA_ PPS reg address
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26720
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273141
Bugzilla Description: kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26719
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273143
Bugzilla Description: kernel: nouveau: offload fence uevents work to workqueue
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26718
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273146
Bugzilla Description: kernel: dm-crypt, dm-verity: disable tasklets
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26717
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273148
Bugzilla Description: kernel: HID: i2c-hid-of: fix NULL-deref on failed power up
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26716
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273150
Bugzilla Description: kernel: usb: core: Prevent null pointer dereference in update_port_device_state
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26715
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273152
Bugzilla Description: kernel: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26714
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273154
Bugzilla Description: kernel: interconnect: qcom: sc8180x: Mark CO0 BCM keepalive
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26713
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273156
Bugzilla Description: kernel: powerpc/pseries/iommu: Fix iommu initialisation during DLPAR add
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26712
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273158
Bugzilla Description: kernel: powerpc/kasan: Fix addr error caused by page alignment
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26711
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273160
Bugzilla Description: kernel: iio: adc: ad4130: zero-initialize clock init data
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26710
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273162
Bugzilla Description: kernel: powerpc/kasan: Limit KASAN thread size increase to 32KB
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26709
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273164
Bugzilla Description: kernel: powerpc/iommu: Fix the missing iommu_group_put() during platform domain attach
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26708
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273166
Bugzilla Description: kernel: mptcp: really cope with fastopen race
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26707
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273168
Bugzilla Description: kernel: net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26706
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273170
Bugzilla Description: kernel: parisc: Fix random data corruption from exception handler
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26705
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273172
Bugzilla Description: kernel: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26704
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273174
Bugzilla Description: kernel: ext4: fix double-free of blocks due to wrong extents moved_len
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26703
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273176
Bugzilla Description: kernel: tracing/timerlat: Move hrtimer_init to timerlat_fd open()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26702
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273178
Bugzilla Description: kernel: iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26769
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273180
Bugzilla Description: kernel: nvmet-fc: avoid deadlock on delete association path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26768
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273183
Bugzilla Description: kernel: LoongArch: Change acpi_core_pic[NR_CPUS] to acpi_core_pic[MAX_CORE_PIC]
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26767
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273185
Bugzilla Description: kernel: drm/amd/display: fixed integer types and null check locations
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26766
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273187
Bugzilla Description: kernel: IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26765
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273190
Bugzilla Description: kernel: LoongArch: Disable IRQ before init_fn() for nonboot CPUs
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26764
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273193
Bugzilla Description: kernel: fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26763
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273196
Bugzilla Description: kernel: dm-crypt: don't modify the data when using authenticated encryption
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26762
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273198
Bugzilla Description: kernel: cxl/pci: Skip to handle RAS errors if CXL.mem device is detached
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26761
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273200
Bugzilla Description: kernel: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26760
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273202
Bugzilla Description: kernel: scsi: target: pscsi: Fix bio_put() for error case
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26759
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273204
Bugzilla Description: kernel: mm/swap: fix race when skipping swapcache
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-362
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26758
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273206
Bugzilla Description: kernel: md: Don't ignore suspended array in md_check_recovery()
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26757
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273208
Bugzilla Description: kernel: md: Don't ignore read-only array in md_check_recovery()
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26756
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273211
Bugzilla Description: kernel: md: Don't register sync_thread for reshape directly
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26755
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273213
Bugzilla Description: kernel: md: Don't suspend the array for interrupted reshape
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-833
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26754
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273215
Bugzilla Description: kernel: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26753
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273217
Bugzilla Description: kernel: crypto: virtio/akcipher - Fix stack overflow on memcpy
CVSS Score:
CVSSv3 Score: 6.0
Vector:
CWE: CWE-121
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26752
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273219
Bugzilla Description: kernel: l2tp: pass correct message length to ip6_append_data
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-130
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26751
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273221
Bugzilla Description: kernel: ARM: ep93xx: Add terminator to gpiod_lookup_table
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-606
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26779
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273223
Bugzilla Description: kernel: wifi: mac80211: fix race condition on enabling fast-xmit
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-362
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26778
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273225
Bugzilla Description: kernel: fbdev: savage: Error out if pixclock equals zero
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26777
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273228
Bugzilla Description: kernel: fbdev: sis: Error out if pixclock equals zero
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26776
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273230
Bugzilla Description: kernel: spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26775
Severity: low
Released on: 03/04/2024
Advisory:
Bugzilla: 2273232
Bugzilla Description: kernel: aoe: avoid potential deadlock at set_capacity
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-833
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26774
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273234
Bugzilla Description: kernel: ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26773
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273236
Bugzilla Description: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-229
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26771
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273238
Bugzilla Description: kernel: dmaengine: ti: edma: Add some null pointer checks to the edma_probe
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-170
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26770
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273240
Bugzilla Description: kernel: HID: nvidia-shield: Add missing null pointer checks to LED initialization
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-170
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26772
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273242
Bugzilla Description: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-229
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26734
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273244
Bugzilla Description: kernel: devlink: fix possible use-after-free and memory leaks in devlink_init()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26733
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273247
Bugzilla Description: kernel: arp: Prevent overflow in arp_req_get().
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26732
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273250
Bugzilla Description: kernel: net: implement lockless setsockopt(SO_PEEK_OFF)
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26731
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273252
Bugzilla Description: kernel: bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26730
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273254
Bugzilla Description: kernel: hwmon: (nct6775) Fix access to temperature configuration registers
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26729
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273256
Bugzilla Description: kernel: drm/amd/display: Fix potential null pointer dereference in dc_dmub_srv
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26728
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273258
Bugzilla Description: kernel: drm/amd/display: fix null-pointer dereference on edid reading
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26744
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273260
Bugzilla Description: kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26743
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273262
Bugzilla Description: kernel: RDMA/qedr: Fix qedr_create_user_qp error flow
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26742
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273264
Bugzilla Description: kernel: scsi: smartpqi: Fix disable_managed_interrupts
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26741
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273266
Bugzilla Description: kernel: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished().
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26740
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273268
Bugzilla Description: kernel: net/sched: act_mirred: use the backlog for mirred ingress
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26739
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273270
Bugzilla Description: kernel: net/sched: act_mirred: don't override retval if we already lost the skb
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26738
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273272
Bugzilla Description: kernel: powerpc/pseries/iommu: DLPAR add doesn't completely initialize pci_controller
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26737
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273274
Bugzilla Description: kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26736
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273276
Bugzilla Description: kernel: afs: Increase buffer size in afs_update_volume_status()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26735
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273278
Bugzilla Description: kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-2700
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2273281
Bugzilla Description: quarkus-core: Leak of local configuration properties into Quarkus applications
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-526
Affected Packages:
Package States: OpenShift Serverless,Red Hat build of Apache Camel for Quarkus,Red Hat build of Apache Camel - HawtIO,Red Hat Build of Keycloak,Red Hat build of OptaPlanner 8,Red Hat build of Quarkus,Red Hat Integration Camel K,Red Hat Integration Camel Quarkus,Red Hat Integration Service Registry,
Full Details
CVE document

CVE-2024-2758
Severity: important
Released on: 03/04/2024
Advisory:
Bugzilla: 2273367
Bugzilla Description: Tempesta FW: HTTP/2 CONTINUATION frames can be utilized for DoS attacks
CVSS Score:
Vector:
CWE:
Affected Packages:
Package States:
Full Details
CVE document

CVE-2024-27982
Severity: moderate
Released on: 03/04/2024
Advisory:
Bugzilla: 2275392
Bugzilla Description: nodejs: HTTP Request Smuggling via Content Length Obfuscation
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-444
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Software Collections,
Full Details
CVE document

CVE-2023-6236
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2250812
Bugzilla Description: JBoss EAP: OIDC app attempting to access the second tenant, the user should be prompted to log
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-345
Affected Packages:
Package States: Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,
Full Details
CVE document

CVE-2024-1233
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2262849
Bugzilla Description: JBoss EAP: wildfly-elytron has a SSRF security issue
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE:
Affected Packages:
Package States: Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,
Full Details
CVE document

CVE-2024-26657
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272687
Bugzilla Description: kernel: drm/sched: fix null-ptr-deref in init entity
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-29834
Severity: important
Released on: 02/04/2024
Advisory:
Bugzilla: 2272689
Bugzilla Description: apache-pulsar: improper authorization for namespace and topic management endpoints
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-285
Affected Packages:
Package States: Red Hat build of Apache Camel 4.0 for Spring Boot,Red Hat build of Apache Camel for Spring Boot,Red Hat Integration Camel K,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Fuse 7,
Full Details
CVE document

CVE-2024-26656
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272692
Bugzilla Description: kernel: drm/amdgpu: use-after-free vulnerability
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52631
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272769
Bugzilla Description: kernel: fs/ntfs3: NULL pointer dereference issue
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52630
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272771
Bugzilla Description: kernel: blk-iocost: UBSAN shift-out-of-bounds warning
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-191
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26666
Severity:
Released on: 02/04/2024
Advisory:
Bugzilla: 2272773
Bugzilla Description: kernel: wifi: mac80211: fix RCU use in TDLS fast-xmit
CVSS Score:
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26667
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272775
Bugzilla Description: kernel: drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26658
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272777
Bugzilla Description: kernel: bcachefs: grab s_umount only if snapshotting
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-833
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26659
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272780
Bugzilla Description: kernel: xhci: handle isoc Babble and Buffer Overrun events properly
CVSS Score:
CVSSv3 Score: 6.0
Vector:
CWE: CWE-119
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26660
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272782
Bugzilla Description: kernel: drm/amd/display: Implement bounds check for stream encoder creation in DCN301
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26661
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272784
Bugzilla Description: kernel: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26662
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272786
Bugzilla Description: kernel: drm/amd/display: 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26663
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272788
Bugzilla Description: kernel: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26664
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272791
Bugzilla Description: kernel: hwmon: (coretemp) Fix out-of-bounds memory access
CVSS Score:
CVSSv3 Score: 6.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26665
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272793
Bugzilla Description: kernel: tunnels: fix out of bounds access when building IPv6 PMTU error
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26669
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272795
Bugzilla Description: kernel: net/sched: flower: Fix chain template offload
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-402
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26668
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272797
Bugzilla Description: kernel: netfilter: nft_limit: reject configurations that cause integer overflow
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26670
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272800
Bugzilla Description: kernel: arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-1300
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52633
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272802
Bugzilla Description: kernel: um: time-travel: fix time corruption
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52632
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272804
Bugzilla Description: kernel: drm/amdkfd: lock dependency warning with srcu
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-667
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52634
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272806
Bugzilla Description: kernel: drm/amd/display: Fix disable_otg_wa logic
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52635
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272808
Bugzilla Description: kernel: PM / devfreq: Synchronize devfreq_monitor_[start/stop]
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-414
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26671
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272811
Bugzilla Description: kernel: blk-mq: fix IO hang from sbitmap wakeup race
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-362
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26672
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272814
Bugzilla Description: kernel: drm/amdgpu: variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()'
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26673
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272816
Bugzilla Description: kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26674
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272818
Bugzilla Description: kernel: x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52636
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272820
Bugzilla Description: kernel: libceph: just wait for more data to be available on the socket
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26683
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272822
Bugzilla Description: kernel: wifi: cfg80211: detect stuck ECSA element in probe resp
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26684
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272824
Bugzilla Description: kernel: net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26675
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272829
Bugzilla Description: kernel: ppp_async: limit MRU to 64K
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26676
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272832
Bugzilla Description: kernel: af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-402
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26677
Severity:
Released on: 02/04/2024
Advisory:
Bugzilla: 2272834
Bugzilla Description: kernel: rxrpc: Fix delayed ACKs to not set the reference serial number
CVSS Score:
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26678
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272836
Bugzilla Description: kernel: x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26679
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272839
Bugzilla Description: kernel: inet: read sk->sk_family once in inet_recv_error()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-413
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26680
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272842
Bugzilla Description: kernel: net: atlantic: Fix DMA mapping for PTP hwts ring
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26681
Severity: low
Released on: 02/04/2024
Advisory:
Bugzilla: 2272844
Bugzilla Description: kernel: netdevsim: avoid potential loop in nsim_dev_trap_report_work()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-606
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-26682
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272846
Bugzilla Description: kernel: wifi: mac80211: improve CSA/ECSA connection refusal
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-3205
Severity: moderate
Released on: 02/04/2024
Advisory:
Bugzilla: 2272889
Bugzilla Description: libyaml: Heap-Based Buffer Overflow
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document