ALSA-2024:10943
- Source
- https://errata.almalinux.org/8/ALSA-2024-10943.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2024:10943.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2024:10943
- Related
- Published
- 2024-12-11T00:00:00Z
- Modified
- 2024-12-16T15:02:24Z
- Summary
- Moderate: kernel security update
- Details
-
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook (CVE-2024-46695)
- kernel: net: avoid potential underflow in qdiscpktlen_init() with UFO (CVE-2024-49949)
- kernel: blk-rq-qos: fix crash on rqqoswait vs. rqqoswake_function race (CVE-2024-50082)
- kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099)
- kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110)
- kernel: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (CVE-2024-50142)
- kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192)
- kernel: netfilter: nfrejectipv6: fix potential crash in nfsendreset6() (CVE-2024-50256)
- kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (CVE-2024-50264)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2024:10943
- https://access.redhat.com/security/cve/CVE-2024-46695
- https://access.redhat.com/security/cve/CVE-2024-49949
- https://access.redhat.com/security/cve/CVE-2024-50082
- https://access.redhat.com/security/cve/CVE-2024-50099
- https://access.redhat.com/security/cve/CVE-2024-50110
- https://access.redhat.com/security/cve/CVE-2024-50142
- https://access.redhat.com/security/cve/CVE-2024-50192
- https://access.redhat.com/security/cve/CVE-2024-50256
- https://access.redhat.com/security/cve/CVE-2024-50264
- https://bugzilla.redhat.com/2312083
- https://bugzilla.redhat.com/2320505
- https://bugzilla.redhat.com/2322308
- https://bugzilla.redhat.com/2323904
- https://bugzilla.redhat.com/2323930
- https://bugzilla.redhat.com/2324315
- https://bugzilla.redhat.com/2324612
- https://bugzilla.redhat.com/2324889
- https://bugzilla.redhat.com/2327168
- https://errata.almalinux.org/8/ALSA-2024-10943.html
Affected packages
AlmaLinux:8 / bpftool
Package
- Name
- bpftool
- Purl
- pkg:rpm/almalinux/bpftool
AlmaLinux:8 / kernel
Package
- Name
- kernel
- Purl
- pkg:rpm/almalinux/kernel
AlmaLinux:8 / kernel-abi-stablelists
Package
- Name
- kernel-abi-stablelists
- Purl
- pkg:rpm/almalinux/kernel-abi-stablelists
AlmaLinux:8 / kernel-core
Package
- Name
- kernel-core
- Purl
- pkg:rpm/almalinux/kernel-core
AlmaLinux:8 / kernel-cross-headers
Package
- Name
- kernel-cross-headers
- Purl
- pkg:rpm/almalinux/kernel-cross-headers
AlmaLinux:8 / kernel-debug
Package
- Name
- kernel-debug
- Purl
- pkg:rpm/almalinux/kernel-debug
AlmaLinux:8 / kernel-debug-core
Package
- Name
- kernel-debug-core
- Purl
- pkg:rpm/almalinux/kernel-debug-core
AlmaLinux:8 / kernel-debug-devel
Package
- Name
- kernel-debug-devel
- Purl
- pkg:rpm/almalinux/kernel-debug-devel
AlmaLinux:8 / kernel-debug-modules
Package
- Name
- kernel-debug-modules
- Purl
- pkg:rpm/almalinux/kernel-debug-modules
AlmaLinux:8 / kernel-debug-modules-extra
Package
- Name
- kernel-debug-modules-extra
- Purl
- pkg:rpm/almalinux/kernel-debug-modules-extra
AlmaLinux:8 / kernel-devel
Package
- Name
- kernel-devel
- Purl
- pkg:rpm/almalinux/kernel-devel
AlmaLinux:8 / kernel-doc
Package
- Name
- kernel-doc
- Purl
- pkg:rpm/almalinux/kernel-doc
AlmaLinux:8 / kernel-headers
Package
- Name
- kernel-headers
- Purl
- pkg:rpm/almalinux/kernel-headers
AlmaLinux:8 / kernel-modules
Package
- Name
- kernel-modules
- Purl
- pkg:rpm/almalinux/kernel-modules
AlmaLinux:8 / kernel-modules-extra
Package
- Name
- kernel-modules-extra
- Purl
- pkg:rpm/almalinux/kernel-modules-extra
AlmaLinux:8 / kernel-tools
Package
- Name
- kernel-tools
- Purl
- pkg:rpm/almalinux/kernel-tools
AlmaLinux:8 / kernel-tools-libs
Package
- Name
- kernel-tools-libs
- Purl
- pkg:rpm/almalinux/kernel-tools-libs
AlmaLinux:8 / kernel-tools-libs-devel
Package
- Name
- kernel-tools-libs-devel
- Purl
- pkg:rpm/almalinux/kernel-tools-libs-devel
AlmaLinux:8 / kernel-zfcpdump
Package
- Name
- kernel-zfcpdump
- Purl
- pkg:rpm/almalinux/kernel-zfcpdump
AlmaLinux:8 / kernel-zfcpdump-core
Package
- Name
- kernel-zfcpdump-core
- Purl
- pkg:rpm/almalinux/kernel-zfcpdump-core
AlmaLinux:8 / kernel-zfcpdump-devel
Package
- Name
- kernel-zfcpdump-devel
- Purl
- pkg:rpm/almalinux/kernel-zfcpdump-devel
AlmaLinux:8 / kernel-zfcpdump-modules
Package
- Name
- kernel-zfcpdump-modules
- Purl
- pkg:rpm/almalinux/kernel-zfcpdump-modules
AlmaLinux:8 / kernel-zfcpdump-modules-extra
Package
- Name
- kernel-zfcpdump-modules-extra
- Purl
- pkg:rpm/almalinux/kernel-zfcpdump-modules-extra
AlmaLinux:8 / perf
Package
- Name
- perf
- Purl
- pkg:rpm/almalinux/perf