RHSA-2024:3421 — Security Advisory

Red Hat Security Advisory: kernel security and bug fix update

Loading…

Severity

Important

Red Hat Product Security

RHEL 9

Products

Official CSAF product identity

Published · May 28, 2024

Updated · November 1, 2026

Topic

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function (CVE-2024-1086)
kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586)
CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743)
kernel: netfilter: nftables: exthdr: fix 4-byte stack OOB write (CVE-2023-52628)
kernel: Use-after-free in nft_verdict_dump due to a race between set GC and transaction (CVE-2023-4244)
kernel: inactive elements in nft_pipapo_walk (CVE-2023-6817)

Bug Fix(es):

kdump 2nd kernel panic in call trace tick_handle_periodic (JIRA:RHEL-32889)