An update for kernel-rt is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of
Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
The kernel-rt packages provide the Real Time Linux Kernel, which enables
fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise
Linux 8.10 Release Notes linked from the References section.
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2019-13631: Out-of-bounds Read (CWE-125)
CVE-2019-15505: Out-of-bounds Read (CWE-125)
CVE-2020-25656: Use After Free (CWE-416)
CVE-2021-3753: Out-of-bounds Read (CWE-125)
CVE-2021-4204: Improper Restriction of Operations within the Bounds of a Memory
Buffer (CWE-119)
CVE-2022-0500: Out-of-bounds Write (CWE-787)
CVE-2022-3565: Use After Free (CWE-416)
CVE-2022-23222: Release of Invalid Pointer or Reference (CWE-763)
CVE-2022-45934: Integer Overflow or Wraparound (CWE-190)
CVE-2023-1513: Improper Initialization (CWE-665)
CVE-2023-3567: Use After Free (CWE-416)
CVE-2023-4133: Use After Free (CWE-416)
CVE-2023-4244: Use After Free (CWE-416)
CVE-2023-6121: Out-of-bounds Read (CWE-125)
CVE-2023-6176
CVE-2023-6622: NULL Pointer Dereference (CWE-476)
CVE-2023-6915: NULL Pointer Dereference (CWE-476)
CVE-2023-6932: Use After Free (CWE-416)
CVE-2023-24023: Channel Accessible by Non-Endpoint (CWE-300)
CVE-2023-25775: Improper Access Control (CWE-284)
CVE-2023-28464: Double Free (CWE-415)
CVE-2023-31083
CVE-2023-37453: Out-of-bounds Read (CWE-125)
CVE-2023-38409: Improper Validation of Array Index (CWE-129)
CVE-2023-39189: Out-of-bounds Read (CWE-125)
CVE-2023-39192: Out-of-bounds Read (CWE-125)
CVE-2023-39193: Out-of-bounds Read (CWE-125)
CVE-2023-39194: Out-of-bounds Read (CWE-125)
CVE-2023-39198: Use After Free (CWE-416)
CVE-2023-42754: NULL Pointer Dereference (CWE-476)
CVE-2023-42755: Out-of-bounds Read (CWE-125)
CVE-2023-45863
CVE-2023-51779: Use After Free (CWE-416)
CVE-2023-51780: Use After Free (CWE-416)
CVE-2023-52340: Uncontrolled Resource Consumption (CWE-400)
CVE-2023-52434
CVE-2023-52448
CVE-2023-52489: Concurrent Execution using Shared Resource with Improper
Synchronization ('Race Condition') (CWE-362)
CVE-2023-52574: NULL Pointer Dereference (CWE-476)
CVE-2023-52580: Incorrect Calculation of Buffer Size (CWE-131)
CVE-2023-52581: Missing Release of Memory after Effective Lifetime (CWE-401)
CVE-2023-52620: Improper Control of Resource Identifiers ('Resource
Injection') (CWE-99)
CVE-2024-0841
CVE-2024-25742
CVE-2024-25743
CVE-2024-26602
CVE-2024-26609: Use After Free (CWE-416)
CVE-2024-26671: Concurrent Execution using Shared Resource with Improper
Synchronization ('Race Condition') (CWE-362)
|
