{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests {CVE-2023-52474}\n- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). {CVE-2023-4622}\n- sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077}\n- RDMA/irdma: Prevent zero-length STAG registration {CVE-2023-25775}\n- block: add check that partition length needs to be aligned with block size {CVE-2023-52458}\n- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS {CVE-2024-26589}\n- bpf: fix check for attempt to corrupt spilled pointer {CVE-2023-52462}\n- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache {CVE-2024-26598}\n- ext4: regenerate buddy after block freeing failed if under fc replay {CVE-2024-26601}\n- ext4: allow ext4_get_group_info() to fail {CVE-2024-26601}\n- mlxsw: spectrum_acl_tcam: Fix stack corruption {CVE-2024-26586}\n- EDAC/thunderx: Fix possible out-of-bounds string access {CVE-2023-52464}\n- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() {CVE-2023-52470}\n- drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469}\n- md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307}\n- igb: set max size RX buffer when store bad packet is enabled {CVE-2023-45871}\n- netfilter: nft_set_rbtree: skip end interval element from gc {CVE-2024-26581}\n- netfilter: nf_tables: check if catch-all set element is active in next generation {CVE-2024-1085}\n- netfilter: nf_tables: skip set commit for deleted/destroyed sets {CVE-2024-0193}\n- netfilter: nft_set_pipapo: skip inactive elements during set walk {CVE-2023-6817}\n- netfilter: nf_tables: split async and sync catchall in two functions {CVE-2023-4244}\n- netfilter: nf_tables: remove catchall element in GC sync path {CVE-2023-4244}\n- netfilter: nf_tables: expose opaque set element as struct nft_elem_priv {CVE-2023-4244}\n- netfilter: nf_tables: set backend .flush always succeeds {CVE-2023-4244}\n- netfilter: nft_set_pipapo: no need to call pipapo_deactivate() from flush {CVE-2023-4244}\n- netfilter: nf_tables: work around newrule after chain binding {CVE-2023-4244}\n- netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure {CVE-2023-4244}\n- netfilter: nf_tables: fix memleak when more than 255 elements expired {CVE-2023-4244}\n- netfilter: nf_tables: disable toggling dormant table state more than once {CVE-2023-4244}\n- netfilter: nf_tables: disallow element removal on anonymous sets {CVE-2023-4244}\n- netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration {CVE-2023-4244}\n- netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails {CVE-2023-4244}\n- netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention {CVE-2023-4244}\n- netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC {CVE-2023-4244}\n- netfilter: nf_tables: disallow rule removal from chain binding {CVE-2023-4244}\n- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction {CVE-2023-4244}\n- netfilter: nf_tables: defer gc run if previous batch is still pending {CVE-2023-4244}\n- netfilter: nf_tables: fix out of memory error handling {CVE-2023-4244}\n- netfilter: nf_tables: use correct lock to protect gc_list {CVE-2023-4244}\n- netfilter: nf_tables: GC transaction race with abort path {CVE-2023-4244}\n- netfilter: nf_tables: flush pending destroy work before netlink notifier {CVE-2023-4244}\n- netfilter: nft_dynset: disallow object maps {CVE-2023-4244}\n- netfilter: nf_tables: GC transaction race with netns dismantle {CVE-2023-4244}\n- netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path {CVE-2023-4244}\n- netfilter: nf_tables: don't fail inserts if duplicate has expired {CVE-2023-4244}\n- netfilter: nf_tables: deactivate catchall elements in next generation {CVE-2023-4244}\n- netfilter: nf_tables: fix kdoc warnings after gc rework {CVE-2023-4244}\n- netfilter: nf_tables: fix false-positive lockdep splat {CVE-2023-4244}\n- netfilter: nf_tables: remove busy mark and gc batch API {CVE-2023-4244}\n- netfilter: nft_set_hash: mark set element as dead when deleting from packet path {CVE-2023-4244}\n- netfilter: nf_tables: adapt set backend to use GC transaction API {CVE-2023-4244}\n- netfilter: nft_set_rbtree: fix overlap expiration walk {CVE-2023-4244}\n- netfilter: nf_tables: GC transaction API to avoid race with control plane {CVE-2023-4244}\n- netfilter: nf_tables: don't skip expired elements during walk {CVE-2023-4244}\n- netfilter: nf_tables: skip bound chain in netns release path {CVE-2023-4244}\n- netfilter: nf_tables: fix spurious set element insertion failure {CVE-2023-4244}\n- netfilter: nf_tables: report use refcount overflow {CVE-2023-4244}\n- netfilter: nf_tables: fix underflow in chain reference counter {CVE-2023-4244}\n- netfilter: nf_tables: disallow timeout for anonymous sets {CVE-2023-4244}\n- netfilter: nf_tables: disallow updates of anonymous sets {CVE-2023-4244}\n- netfilter: nf_tables: reject unbound chain set before commit phase {CVE-2023-4244}\n- netfilter: nf_tables: reject unbound anonymous set before commit phase {CVE-2023-4244}\n- netfilter: nf_tables: disallow element updates of bound anonymous sets {CVE-2023-4244}\n- netfilter: nf_tables: fix underflow in object reference counter {CVE-2023-4244}\n- netfilter: nf_tables: drop map element references from preparation phase {CVE-2023-4244}\n- netfilter: nf_tables: validate variable length element extension {CVE-2023-4244}\n- netfilter: nft_set_pipapo: .walk does not deal with generations {CVE-2023-4244}\n- netfilter: nf_tables: relax set/map validation checks {CVE-2023-4244}\n- netfilter: nf_tables: integrate pipapo into commit protocol {CVE-2023-4244}\n- netfilter: nf_tables: upfront validation of data via nft_data_init() {CVE-2023-4244}\n- netfilter: nft_set_rbtree: fix null deref on element insertion\n- netfilter: nft_set_rbtree: Switch to node list walk for overlap detection\n- netfilter: nft_set_rbtree: skip elements in transaction from garbage collection\n- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR {CVE-2023-4015}\n- netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() {CVE-2023-7192}\n- Documentation/hw-vuln: Fix rST warning {CVE-2022-27672}\n- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions {CVE-2022-27672}\n- KVM: x86: Mitigate the cross-thread return address predictions bug {CVE-2022-27672}\n- x86/speculation: Identify processors vulnerable to SMT RSB predictions {CVE-2022-27672}\n- uio: Fix use-after-free in uio_open {CVE-2023-52439}\n- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump {CVE-2023-52448}", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2024/clsa-2024_1715000749.json" }, { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "tracking": { "current_release_date": "2026-02-16T09:11:16Z", "generator": { "date": "2026-02-16T09:11:16Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2024:1715000749", "initial_release_date": "2024-05-06T09:05:51Z", "revision_history": [ { "date": "2024-05-06T09:05:51Z", "number": "1", "summary": "Initial version" }, { "date": "2025-11-06T18:26:24Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-02-16T09:11:16Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "kernel: Fix of 25 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bpftool@7.0.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-partner@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-ipaclones-internal@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-uki-virt@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-internal@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-core@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-selftests-internal@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-extra@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-partner@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel-matched@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-extra@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-core@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-cross-headers@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-core@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rtla@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel-matched@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-core@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/perf@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-uki-virt@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-headers@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-perf@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product": { "name": "kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_id": "kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-internal@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "product": { "name": "kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "product_id": "kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-abi-stablelists@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=noarch" } } }, { "category": "product_version", "name": "kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "product": { "name": "kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "product_id": "kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-doc@5.14.0-284.11.1.el9_2.tuxcare.5.els3?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch" }, "product_reference": "kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch" }, "product_reference": "kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" }, "product_reference": "kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-45871", "cwe": { "id": "CWE-131", "name": "Incorrect Calculation of Buffer Size" }, "notes": [ { "category": "description", "text": "An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-45871" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.3", "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.3" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=bb5ed01cd2428cd25b1c88a3a9cba87055eb289f", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=bb5ed01cd2428cd25b1c88a3a9cba87055eb289f" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231110-0001/", "url": "https://security.netapp.com/advisory/ntap-20231110-0001/" } ], "release_date": "2023-10-15T01:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52458", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: add check that partition length needs to be aligned with block size\n\nBefore calling add partition or resize partition, there is no check\non whether the length is aligned with the logical block size.\nIf the logical block size of the disk is larger than 512 bytes,\nthen the partition size maybe not the multiple of the logical block size,\nand when the last sector is read, bio_truncate() will adjust the bio size,\nresulting in an IO error if the size of the read command is smaller than\nthe logical block size.If integrity data is supported, this will also\nresult in a null pointer dereference when calling bio_integrity_free.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52458" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5010c27120962c85d2f421d2cf211791c9603503", "url": "https://git.kernel.org/stable/c/5010c27120962c85d2f421d2cf211791c9603503" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6f64f866aa1ae6975c95d805ed51d7e9433a0016", "url": "https://git.kernel.org/stable/c/6f64f866aa1ae6975c95d805ed51d7e9433a0016" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8f6dfa1f1efe6dcca2d43e575491d8fcbe922f62", "url": "https://git.kernel.org/stable/c/8f6dfa1f1efe6dcca2d43e575491d8fcbe922f62" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bcdc288e7bc008daf38ef0401b53e4a8bb61bbe5", "url": "https://git.kernel.org/stable/c/bcdc288e7bc008daf38ef0401b53e4a8bb61bbe5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cb16cc1abda18a9514106d2ac8c8d7abc0be5ed8", "url": "https://git.kernel.org/stable/c/cb16cc1abda18a9514106d2ac8c8d7abc0be5ed8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ef31cc87794731ffcb578a195a2c47d744e25fb8", "url": "https://git.kernel.org/stable/c/ef31cc87794731ffcb578a195a2c47d744e25fb8" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" } ], "release_date": "2024-02-23T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-23307", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-23307" }, { "category": "external", "summary": "https://bugzilla.openanolis.cn/show_bug.cgi?id=7975", "url": "https://bugzilla.openanolis.cn/show_bug.cgi?id=7975" } ], "release_date": "2024-01-25T07:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-25775", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-25775" }, { "category": "external", "summary": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.html", "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230915-0013/", "url": "https://security.netapp.com/advisory/ntap-20230915-0013/" } ], "release_date": "2023-08-11T03:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2023-7192", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "notes": [ { "category": "description", "text": "A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-7192" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0723", "url": "https://access.redhat.com/errata/RHSA-2024:0723" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0725", "url": "https://access.redhat.com/errata/RHSA-2024:0725" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1188", "url": "https://access.redhat.com/errata/RHSA-2024:1188" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1250", "url": "https://access.redhat.com/errata/RHSA-2024:1250" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1306", "url": "https://access.redhat.com/errata/RHSA-2024:1306" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1367", "url": "https://access.redhat.com/errata/RHSA-2024:1367" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1382", "url": "https://access.redhat.com/errata/RHSA-2024:1382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1404", "url": "https://access.redhat.com/errata/RHSA-2024:1404" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2006", "url": "https://access.redhat.com/errata/RHSA-2024:2006" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2008", "url": "https://access.redhat.com/errata/RHSA-2024:2008" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-7192", "url": "https://access.redhat.com/security/cve/CVE-2023-7192" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256279", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256279" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=ac4893980bbe79ce383daf9a0885666a30fe4c83", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=ac4893980bbe79ce383daf9a0885666a30fe4c83" } ], "release_date": "2024-01-02T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-52464", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/thunderx: Fix possible out-of-bounds string access\n\nEnabling -Wstringop-overflow globally exposes a warning for a common bug\nin the usage of strncat():\n\n drivers/edac/thunderx_edac.c: In function 'thunderx_ocx_com_threaded_isr':\n drivers/edac/thunderx_edac.c:1136:17: error: 'strncat' specified bound 1024 equals destination size [-Werror=stringop-overflow=]\n 1136 | strncat(msg, other, OCX_MESSAGE_SIZE);\n | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n ...\n 1145 | strncat(msg, other, OCX_MESSAGE_SIZE);\n ...\n 1150 | strncat(msg, other, OCX_MESSAGE_SIZE);\n\n ...\n\nApparently the author of this driver expected strncat() to behave the\nway that strlcat() does, which uses the size of the destination buffer\nas its third argument rather than the length of the source buffer. The\nresult is that there is no check on the size of the allocated buffer.\n\nChange it to strlcat().\n\n [ bp: Trim compiler output, fixup commit message. ]", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52464" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/426fae93c01dffa379225eb2bd4d3cdc42c6eec5", "url": "https://git.kernel.org/stable/c/426fae93c01dffa379225eb2bd4d3cdc42c6eec5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/475c58e1a471e9b873e3e39958c64a2d278275c8", "url": "https://git.kernel.org/stable/c/475c58e1a471e9b873e3e39958c64a2d278275c8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5da3b6e7196f0b4f3728e4e25eb20233a9ddfaf6", "url": "https://git.kernel.org/stable/c/5da3b6e7196f0b4f3728e4e25eb20233a9ddfaf6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6aa7865ba7ff7f0ede0035180fb3b9400ceb405a", "url": "https://git.kernel.org/stable/c/6aa7865ba7ff7f0ede0035180fb3b9400ceb405a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/700cf4bead80fac994dcc43ae1ca5d86d8959b21", "url": "https://git.kernel.org/stable/c/700cf4bead80fac994dcc43ae1ca5d86d8959b21" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/71c17ee02538802ceafc830f0736aa35b564e601", "url": "https://git.kernel.org/stable/c/71c17ee02538802ceafc830f0736aa35b564e601" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9dbac9fdae6e3b411fc4c3fca3bf48f70609c398", "url": "https://git.kernel.org/stable/c/9dbac9fdae6e3b411fc4c3fca3bf48f70609c398" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e1c86511241588efffaa49556196f09a498d5057", "url": "https://git.kernel.org/stable/c/e1c86511241588efffaa49556196f09a498d5057" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" } ], "release_date": "2024-02-23T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52448", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump\n\nSyzkaller has reported a NULL pointer dereference when accessing\nrgd->rd_rgl in gfs2_rgrp_dump(). This can happen when creating\nrgd->rd_gl fails in read_rindex_entry(). Add a NULL pointer check in\ngfs2_rgrp_dump() to prevent that.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52448" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/067a7c48c2c70f05f9460d6f0e8423e234729f05", "url": "https://git.kernel.org/stable/c/067a7c48c2c70f05f9460d6f0e8423e234729f05" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5c28478af371a1c3fdb570ca67f110e1ae60fc37", "url": "https://git.kernel.org/stable/c/5c28478af371a1c3fdb570ca67f110e1ae60fc37" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8877243beafa7c6bfc42022cbfdf9e39b25bd4fa", "url": "https://git.kernel.org/stable/c/8877243beafa7c6bfc42022cbfdf9e39b25bd4fa" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c323efd620c741168c8e0cc6fc0be04ab57e331a", "url": "https://git.kernel.org/stable/c/c323efd620c741168c8e0cc6fc0be04ab57e331a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d69d7804cf9e2ba171a27e5f98bc266f13d0414a", "url": "https://git.kernel.org/stable/c/d69d7804cf9e2ba171a27e5f98bc266f13d0414a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ee0586d73cbaf0e7058bc640d62a9daf2dfa9178", "url": "https://git.kernel.org/stable/c/ee0586d73cbaf0e7058bc640d62a9daf2dfa9178" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/efc8ef87ab9185a23d5676f2f7d986022d91bcde", "url": "https://git.kernel.org/stable/c/efc8ef87ab9185a23d5676f2f7d986022d91bcde" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" } ], "release_date": "2024-02-22T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-52470", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: check the alloc_workqueue return value in radeon_crtc_init()\n\ncheck the alloc_workqueue return value in radeon_crtc_init()\nto avoid null-ptr-deref.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52470" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0b813a6a0087451cb702b6eb841f10856f49d088", "url": "https://git.kernel.org/stable/c/0b813a6a0087451cb702b6eb841f10856f49d088" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/14bbfaa5df273b26cde6707f6e655585700e6fe1", "url": "https://git.kernel.org/stable/c/14bbfaa5df273b26cde6707f6e655585700e6fe1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/21b1645660717d6126dd4866c850fcc5c4703a41", "url": "https://git.kernel.org/stable/c/21b1645660717d6126dd4866c850fcc5c4703a41" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/57ca7984806d79b38af528de88fd803babf27feb", "url": "https://git.kernel.org/stable/c/57ca7984806d79b38af528de88fd803babf27feb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5d12c5d75f7c78b83a738025947651ec5c95b4d4", "url": "https://git.kernel.org/stable/c/5d12c5d75f7c78b83a738025947651ec5c95b4d4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7a2464fac80d42f6f8819fed97a553e9c2f43310", "url": "https://git.kernel.org/stable/c/7a2464fac80d42f6f8819fed97a553e9c2f43310" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c4ff55408187f2595066967047363ca84e76db85", "url": "https://git.kernel.org/stable/c/c4ff55408187f2595066967047363ca84e76db85" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fb2d8bc9b5e55848b8a7c3c028e2ee8d49f28f97", "url": "https://git.kernel.org/stable/c/fb2d8bc9b5e55848b8a7c3c028e2ee8d49f28f97" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" } ], "release_date": "2024-02-26T16:27:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-26598", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache\n\nThere is a potential UAF scenario in the case of an LPI translation\ncache hit racing with an operation that invalidates the cache, such\nas a DISCARD ITS command. The root of the problem is that\nvgic_its_check_cache() does not elevate the refcount on the vgic_irq\nbefore dropping the lock that serializes refcount changes.\n\nHave vgic_its_check_cache() raise the refcount on the returned vgic_irq\nand add the corresponding decrement after queueing the interrupt.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-26598" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/12c2759ab1343c124ed46ba48f27bd1ef5d2dff4", "url": "https://git.kernel.org/stable/c/12c2759ab1343c124ed46ba48f27bd1ef5d2dff4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/65b201bf3e9af1b0254243a5881390eda56f72d1", "url": "https://git.kernel.org/stable/c/65b201bf3e9af1b0254243a5881390eda56f72d1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ad362fe07fecf0aba839ff2cc59a3617bd42c33f", "url": "https://git.kernel.org/stable/c/ad362fe07fecf0aba839ff2cc59a3617bd42c33f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ba7be666740847d967822bed15500656b26bc703", "url": "https://git.kernel.org/stable/c/ba7be666740847d967822bed15500656b26bc703" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d04acadb6490aa3314f9c9e087691e55de153b88", "url": "https://git.kernel.org/stable/c/d04acadb6490aa3314f9c9e087691e55de153b88" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dba788e25f05209adf2b0175eb1691dc89fb1ba6", "url": "https://git.kernel.org/stable/c/dba788e25f05209adf2b0175eb1691dc89fb1ba6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dd3956a1b3dd11f46488c928cb890d6937d1ca80", "url": "https://git.kernel.org/stable/c/dd3956a1b3dd11f46488c928cb890d6937d1ca80" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" } ], "release_date": "2024-02-23T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-26586", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxsw: spectrum_acl_tcam: Fix stack corruption\n\nWhen tc filters are first added to a net device, the corresponding local\nport gets bound to an ACL group in the device. The group contains a list\nof ACLs. In turn, each ACL points to a different TCAM region where the\nfilters are stored. During forwarding, the ACLs are sequentially\nevaluated until a match is found.\n\nOne reason to place filters in different regions is when they are added\nwith decreasing priorities and in an alternating order so that two\nconsecutive filters can never fit in the same region because of their\nkey usage.\n\nIn Spectrum-2 and newer ASICs the firmware started to report that the\nmaximum number of ACLs in a group is more than 16, but the layout of the\nregister that configures ACL groups (PAGT) was not updated to account\nfor that. It is therefore possible to hit stack corruption [1] in the\nrare case where more than 16 ACLs in a group are required.\n\nFix by limiting the maximum ACL group size to the minimum between what\nthe firmware reports and the maximum ACLs that fit in the PAGT register.\n\nAdd a test case to make sure the machine does not crash when this\ncondition is hit.\n\n[1]\nKernel panic - not syncing: stack-protector: Kernel stack is corrupted in: mlxsw_sp_acl_tcam_group_update+0x116/0x120\n[...]\n dump_stack_lvl+0x36/0x50\n panic+0x305/0x330\n __stack_chk_fail+0x15/0x20\n mlxsw_sp_acl_tcam_group_update+0x116/0x120\n mlxsw_sp_acl_tcam_group_region_attach+0x69/0x110\n mlxsw_sp_acl_tcam_vchunk_get+0x492/0xa20\n mlxsw_sp_acl_tcam_ventry_add+0x25/0xe0\n mlxsw_sp_acl_rule_add+0x47/0x240\n mlxsw_sp_flower_replace+0x1a9/0x1d0\n tc_setup_cb_add+0xdc/0x1c0\n fl_hw_replace_filter+0x146/0x1f0\n fl_change+0xc17/0x1360\n tc_new_tfilter+0x472/0xb90\n rtnetlink_rcv_msg+0x313/0x3b0\n netlink_rcv_skb+0x58/0x100\n netlink_unicast+0x244/0x390\n netlink_sendmsg+0x1e4/0x440\n ____sys_sendmsg+0x164/0x260\n ___sys_sendmsg+0x9a/0xe0\n __sys_sendmsg+0x7a/0xc0\n do_syscall_64+0x40/0xe0\n entry_SYSCALL_64_after_hwframe+0x63/0x6b", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-26586" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2f5e1565740490706332c06f36211d4ce0f88e62", "url": "https://git.kernel.org/stable/c/2f5e1565740490706332c06f36211d4ce0f88e62" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/348112522a35527c5bcba933b9fefb40a4f44f15", "url": "https://git.kernel.org/stable/c/348112522a35527c5bcba933b9fefb40a4f44f15" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/483ae90d8f976f8339cf81066312e1329f2d3706", "url": "https://git.kernel.org/stable/c/483ae90d8f976f8339cf81066312e1329f2d3706" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/56750ea5d15426b5f307554e7699e8b5f76c3182", "url": "https://git.kernel.org/stable/c/56750ea5d15426b5f307554e7699e8b5f76c3182" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6fd24675188d354b1cad47462969afa2ab09d819", "url": "https://git.kernel.org/stable/c/6fd24675188d354b1cad47462969afa2ab09d819" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a361c2c1da5dbb13ca67601cf961ab3ad68af383", "url": "https://git.kernel.org/stable/c/a361c2c1da5dbb13ca67601cf961ab3ad68af383" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" } ], "release_date": "2024-02-22T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-26601", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: regenerate buddy after block freeing failed if under fc replay\n\nThis mostly reverts commit 6bd97bf273bd (\"ext4: remove redundant\nmb_regenerate_buddy()\") and reintroduces mb_regenerate_buddy(). Based on\ncode in mb_free_blocks(), fast commit replay can end up marking as free\nblocks that are already marked as such. This causes corruption of the\nbuddy bitmap so we need to regenerate it in that case.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-26601" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6b0d48647935e4b8c7b75d1eccb9043fcd4ee581", "url": "https://git.kernel.org/stable/c/6b0d48647935e4b8c7b75d1eccb9043fcd4ee581" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/78327acd4cdc4a1601af718b781eece577b6b7d4", "url": "https://git.kernel.org/stable/c/78327acd4cdc4a1601af718b781eece577b6b7d4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/94ebf71bddbcd4ab1ce43ae32c6cb66396d2d51a", "url": "https://git.kernel.org/stable/c/94ebf71bddbcd4ab1ce43ae32c6cb66396d2d51a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c1317822e2de80e78f137d3a2d99febab1b80326", "url": "https://git.kernel.org/stable/c/c1317822e2de80e78f137d3a2d99febab1b80326" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c9b528c35795b711331ed36dc3dbee90d5812d4e", "url": "https://git.kernel.org/stable/c/c9b528c35795b711331ed36dc3dbee90d5812d4e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ea42d6cffb0dd27a417f410b9d0011e9859328cb", "url": "https://git.kernel.org/stable/c/ea42d6cffb0dd27a417f410b9d0011e9859328cb" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" } ], "release_date": "2024-02-26T16:27:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-0193", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-0193" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1018", "url": "https://access.redhat.com/errata/RHSA-2024:1018" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1019", "url": "https://access.redhat.com/errata/RHSA-2024:1019" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1248", "url": "https://access.redhat.com/errata/RHSA-2024:1248" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2094", "url": "https://access.redhat.com/errata/RHSA-2024:2094" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:4412", "url": "https://access.redhat.com/errata/RHSA-2024:4412" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:4415", "url": "https://access.redhat.com/errata/RHSA-2024:4415" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2024-0193", "url": "https://access.redhat.com/security/cve/CVE-2024-0193" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2255653", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255653" } ], "release_date": "2024-01-02T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-4244", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nDue to a race condition between nf_tables netlink control plane transaction and nft_set element garbage collection, it is possible to underflow the reference counter causing a use-after-free vulnerability.\n\nWe recommend upgrading past commit 3e91b0ebd994635df2346353322ac51ce84ce6d8.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4244" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e91b0ebd994635df2346353322ac51ce84ce6d8", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e91b0ebd994635df2346353322ac51ce84ce6d8" }, { "category": "external", "summary": "https://kernel.dance/3e91b0ebd994635df2346353322ac51ce84ce6d8", "url": "https://kernel.dance/3e91b0ebd994635df2346353322ac51ce84ce6d8" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html", "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html" } ], "release_date": "2023-09-06T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-6817", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nThe function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.\n\nWe recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6817" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html", "url": "http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2023/12/22/13", "url": "http://www.openwall.com/lists/oss-security/2023/12/22/13" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2023/12/22/6", "url": "http://www.openwall.com/lists/oss-security/2023/12/22/6" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=317eb9685095678f2c9f5a8189de698c5354316a", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=317eb9685095678f2c9f5a8189de698c5354316a" }, { "category": "external", "summary": "https://kernel.dance/317eb9685095678f2c9f5a8189de698c5354316a", "url": "https://kernel.dance/317eb9685095678f2c9f5a8189de698c5354316a" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html" } ], "release_date": "2023-12-18T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52439", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nuio: Fix use-after-free in uio_open\n\ncore-1\t\t\t\tcore-2\n-------------------------------------------------------\nuio_unregister_device\t\tuio_open\n\t\t\t\tidev = idr_find()\ndevice_unregister(&idev->dev)\nput_device(&idev->dev)\nuio_device_release\n\t\t\t\tget_device(&idev->dev)\nkfree(idev)\nuio_free_minor(minor)\n\t\t\t\tuio_release\n\t\t\t\tput_device(&idev->dev)\n\t\t\t\tkfree(idev)\n-------------------------------------------------------\n\nIn the core-1 uio_unregister_device(), the device_unregister will kfree\nidev when the idev->dev kobject ref is 1. But after core-1\ndevice_unregister, put_device and before doing kfree, the core-2 may\nget_device. Then:\n1. After core-1 kfree idev, the core-2 will do use-after-free for idev.\n2. When core-2 do uio_release and put_device, the idev will be double\n freed.\n\nTo address this issue, we can get idev atomic & inc idev reference with\nminor_lock.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52439" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0c9ae0b8605078eafc3bea053cc78791e97ba2e2", "url": "https://git.kernel.org/stable/c/0c9ae0b8605078eafc3bea053cc78791e97ba2e2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/17a8519cb359c3b483fb5c7367efa9a8a508bdea", "url": "https://git.kernel.org/stable/c/17a8519cb359c3b483fb5c7367efa9a8a508bdea" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3174e0f7de1ba392dc191625da83df02d695b60c", "url": "https://git.kernel.org/stable/c/3174e0f7de1ba392dc191625da83df02d695b60c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/35f102607054faafe78d2a6994b18d5d9d6e92ad", "url": "https://git.kernel.org/stable/c/35f102607054faafe78d2a6994b18d5d9d6e92ad" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5cf604ee538ed0c467abe3b4cda5308a6398f0f7", "url": "https://git.kernel.org/stable/c/5cf604ee538ed0c467abe3b4cda5308a6398f0f7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5e0be1229ae199ebb90b33102f74a0f22d152570", "url": "https://git.kernel.org/stable/c/5e0be1229ae199ebb90b33102f74a0f22d152570" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/913205930da6213305616ac539447702eaa85e41", "url": "https://git.kernel.org/stable/c/913205930da6213305616ac539447702eaa85e41" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e93da893d52d82d57fc0db2ca566024e0f26ff50", "url": "https://git.kernel.org/stable/c/e93da893d52d82d57fc0db2ca566024e0f26ff50" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241227-0006/", "url": "https://security.netapp.com/advisory/ntap-20241227-0006/" } ], "release_date": "2024-02-20T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52462", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix check for attempt to corrupt spilled pointer\n\nWhen register is spilled onto a stack as a 1/2/4-byte register, we set\nslot_type[BPF_REG_SIZE - 1] (plus potentially few more below it,\ndepending on actual spill size). So to check if some stack slot has\nspilled register we need to consult slot_type[7], not slot_type[0].\n\nTo avoid the need to remember and double-check this in the future, just\nuse is_spilled_reg() helper.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52462" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2757f17972d87773b3677777f5682510f13c66ef", "url": "https://git.kernel.org/stable/c/2757f17972d87773b3677777f5682510f13c66ef" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/40617d45ea05535105e202a8a819e388a2b1f036", "url": "https://git.kernel.org/stable/c/40617d45ea05535105e202a8a819e388a2b1f036" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/67e6707f07354ed1acb4e65552e97c60cf9d69cf", "url": "https://git.kernel.org/stable/c/67e6707f07354ed1acb4e65552e97c60cf9d69cf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8dc15b0670594543c356567a1a45b0182ec63174", "url": "https://git.kernel.org/stable/c/8dc15b0670594543c356567a1a45b0182ec63174" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ab125ed3ec1c10ccc36bc98c7a4256ad114a3dae", "url": "https://git.kernel.org/stable/c/ab125ed3ec1c10ccc36bc98c7a4256ad114a3dae" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fc3e3c50a0a4cac1463967c110686189e4a59104", "url": "https://git.kernel.org/stable/c/fc3e3c50a0a4cac1463967c110686189e4a59104" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" } ], "release_date": "2024-02-23T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-26589", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Reject variable offset alu on PTR_TO_FLOW_KEYS\n\nFor PTR_TO_FLOW_KEYS, check_flow_keys_access() only uses fixed off\nfor validation. However, variable offset ptr alu is not prohibited\nfor this ptr kind. So the variable offset is not checked.\n\nThe following prog is accepted:\n\n func#0 @0\n 0: R1=ctx() R10=fp0\n 0: (bf) r6 = r1 ; R1=ctx() R6_w=ctx()\n 1: (79) r7 = *(u64 *)(r6 +144) ; R6_w=ctx() R7_w=flow_keys()\n 2: (b7) r8 = 1024 ; R8_w=1024\n 3: (37) r8 /= 1 ; R8_w=scalar()\n 4: (57) r8 &= 1024 ; R8_w=scalar(smin=smin32=0,\n smax=umax=smax32=umax32=1024,var_off=(0x0; 0x400))\n 5: (0f) r7 += r8\n mark_precise: frame0: last_idx 5 first_idx 0 subseq_idx -1\n mark_precise: frame0: regs=r8 stack= before 4: (57) r8 &= 1024\n mark_precise: frame0: regs=r8 stack= before 3: (37) r8 /= 1\n mark_precise: frame0: regs=r8 stack= before 2: (b7) r8 = 1024\n 6: R7_w=flow_keys(smin=smin32=0,smax=umax=smax32=umax32=1024,var_off\n =(0x0; 0x400)) R8_w=scalar(smin=smin32=0,smax=umax=smax32=umax32=1024,\n var_off=(0x0; 0x400))\n 6: (79) r0 = *(u64 *)(r7 +0) ; R0_w=scalar()\n 7: (95) exit\n\nThis prog loads flow_keys to r7, and adds the variable offset r8\nto r7, and finally causes out-of-bounds access:\n\n BUG: unable to handle page fault for address: ffffc90014c80038\n [...]\n Call Trace:\n \n bpf_dispatcher_nop_func include/linux/bpf.h:1231 [inline]\n __bpf_prog_run include/linux/filter.h:651 [inline]\n bpf_prog_run include/linux/filter.h:658 [inline]\n bpf_prog_run_pin_on_cpu include/linux/filter.h:675 [inline]\n bpf_flow_dissect+0x15f/0x350 net/core/flow_dissector.c:991\n bpf_prog_test_run_flow_dissector+0x39d/0x620 net/bpf/test_run.c:1359\n bpf_prog_test_run kernel/bpf/syscall.c:4107 [inline]\n __sys_bpf+0xf8f/0x4560 kernel/bpf/syscall.c:5475\n __do_sys_bpf kernel/bpf/syscall.c:5561 [inline]\n __se_sys_bpf kernel/bpf/syscall.c:5559 [inline]\n __x64_sys_bpf+0x73/0xb0 kernel/bpf/syscall.c:5559\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nFix this by rejecting ptr alu with variable offset on flow_keys.\nApplying the patch rejects the program with \"R7 pointer arithmetic\non flow_keys prohibited\".", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-26589" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1b500d5d6cecf98dd6ca88bc9e7ae1783c83e6d3", "url": "https://git.kernel.org/stable/c/1b500d5d6cecf98dd6ca88bc9e7ae1783c83e6d3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/22c7fa171a02d310e3a3f6ed46a698ca8a0060ed", "url": "https://git.kernel.org/stable/c/22c7fa171a02d310e3a3f6ed46a698ca8a0060ed" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/29ffa63f21bcdcef3e36b03cccf9d0cd031f6ab0", "url": "https://git.kernel.org/stable/c/29ffa63f21bcdcef3e36b03cccf9d0cd031f6ab0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4108b86e324da42f7ed425bd71632fd844300dc8", "url": "https://git.kernel.org/stable/c/4108b86e324da42f7ed425bd71632fd844300dc8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e8d3872b617c21100c5ee4f64e513997a68c2e3d", "url": "https://git.kernel.org/stable/c/e8d3872b617c21100c5ee4f64e513997a68c2e3d" } ], "release_date": "2024-02-22T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-4015", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nOn an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and objects be deactivated but later used.\n\nWe recommend upgrading past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4015" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0a771f7b266b02d262900c75f1e175c7fe76fec2", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0a771f7b266b02d262900c75f1e175c7fe76fec2" }, { "category": "external", "summary": "https://kernel.dance/0a771f7b266b02d262900c75f1e175c7fe76fec2", "url": "https://kernel.dance/0a771f7b266b02d262900c75f1e175c7fe76fec2" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5492", "url": "https://www.debian.org/security/2023/dsa-5492" } ], "release_date": "2023-09-06T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-26581", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_rbtree: skip end interval element from gc\n\nrbtree lazy gc on insert might collect an end interval element that has\nbeen just added in this transactions, skip end interval elements that\nare not yet active.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-26581" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/10e9cb39313627f2eae4cd70c4b742074e998fd8", "url": "https://git.kernel.org/stable/c/10e9cb39313627f2eae4cd70c4b742074e998fd8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1296c110c5a0b45a8fcf58e7d18bc5da61a565cb", "url": "https://git.kernel.org/stable/c/1296c110c5a0b45a8fcf58e7d18bc5da61a565cb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2bab493a5624444ec6e648ad0d55a362bcb4c003", "url": "https://git.kernel.org/stable/c/2bab493a5624444ec6e648ad0d55a362bcb4c003" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4cee42fcf54fec46b344681e7cc4f234bb22f85a", "url": "https://git.kernel.org/stable/c/4cee42fcf54fec46b344681e7cc4f234bb22f85a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/60c0c230c6f046da536d3df8b39a20b9a9fd6af0", "url": "https://git.kernel.org/stable/c/60c0c230c6f046da536d3df8b39a20b9a9fd6af0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6eb14441f10602fa1cf691da9d685718b68b78a9", "url": "https://git.kernel.org/stable/c/6eb14441f10602fa1cf691da9d685718b68b78a9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7", "url": "https://git.kernel.org/stable/c/b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c60d252949caf9aba537525195edae6bbabc35eb", "url": "https://git.kernel.org/stable/c/c60d252949caf9aba537525195edae6bbabc35eb" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" } ], "release_date": "2024-02-20T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52469", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/amd/pm: fix a use-after-free in kv_parse_power_table\n\nWhen ps allocated by kzalloc equals to NULL, kv_parse_power_table\nfrees adev->pm.dpm.ps that allocated before. However, after the control\nflow goes through the following call chains:\n\nkv_parse_power_table\n |-> kv_dpm_init\n |-> kv_dpm_sw_init\n\t |-> kv_dpm_fini\n\nThe adev->pm.dpm.ps is used in the for loop of kv_dpm_fini after its\nfirst free in kv_parse_power_table and causes a use-after-free bug.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52469" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/28dd788382c43b330480f57cd34cde0840896743", "url": "https://git.kernel.org/stable/c/28dd788382c43b330480f57cd34cde0840896743" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3426f059eacc33ecc676b0d66539297e1cfafd02", "url": "https://git.kernel.org/stable/c/3426f059eacc33ecc676b0d66539297e1cfafd02" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/35fa2394d26e919f63600ce631e6aefc95ec2706", "url": "https://git.kernel.org/stable/c/35fa2394d26e919f63600ce631e6aefc95ec2706" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/520e213a0b97b64735a13950e9371e0a5d7a5dc3", "url": "https://git.kernel.org/stable/c/520e213a0b97b64735a13950e9371e0a5d7a5dc3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8a27d9d9fc9b5564b8904c3a77a7dea482bfa34e", "url": "https://git.kernel.org/stable/c/8a27d9d9fc9b5564b8904c3a77a7dea482bfa34e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8b55b06e737feb2a645b0293ea27e38418876d63", "url": "https://git.kernel.org/stable/c/8b55b06e737feb2a645b0293ea27e38418876d63" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/95084632a65d5c0d682a83b55935560bdcd2a1e3", "url": "https://git.kernel.org/stable/c/95084632a65d5c0d682a83b55935560bdcd2a1e3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b6dcba02ee178282e0d28684d241e0b8462dea6a", "url": "https://git.kernel.org/stable/c/b6dcba02ee178282e0d28684d241e0b8462dea6a" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" } ], "release_date": "2024-02-26T16:27:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-1085", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nThe nft_setelem_catchall_deactivate() function checks whether the catch-all set element is active in the current generation instead of the next generation before freeing it, but only flags it inactive in the next generation, making it possible to free the element multiple times, leading to a double free vulnerability.\n\nWe recommend upgrading past commit b1db244ffd041a49ecc9618e8feb6b5c1afcdaa7.\n\n", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-1085" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b1db244ffd041a49ecc9618e8feb6b5c1afcdaa7", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b1db244ffd041a49ecc9618e8feb6b5c1afcdaa7" }, { "category": "external", "summary": "https://kernel.dance/b1db244ffd041a49ecc9618e8feb6b5c1afcdaa7", "url": "https://kernel.dance/b1db244ffd041a49ecc9618e8feb6b5c1afcdaa7" } ], "release_date": "2024-01-31T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2024-05-06T09:05:51Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2024:1715000749" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.11.1.el9_2.tuxcare.5.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }