The following advisory data is extracted from: https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10262.json Red Hat officially shut down their mailing list notifications October 10, 2023. Due to this, Packet Storm has recreated the below data as a reference point to raise awareness. It must be noted that due to an inability to easily track revision updates without crawling Red Hat's archive, these advisories are single notifications and we strongly suggest that you visit the Red Hat provided links to ensure you have the latest information available if the subject matter listed pertains to your environment. - Packet Storm Staff ==================================================================== Red Hat Security Advisory Synopsis: Moderate: kernel security update Advisory ID: RHSA-2024:10262-03 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2024:10262 Issue date: 2024-11-26 Revision: 03 CVE Names: CVE-2021-4204 ==================================================================== Summary: An update for kernel is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: improper input validation may lead to privilege escalation (CVE-2021-4204) * kernel: local privileges escalation in kernel/bpf/verifier.c (CVE-2022-23222) * kernel: Linux ebpf logic vulnerability leads to critical memory read and write gaining root privileges (CVE-2022-0500) * kernel: x86/mm: Randomize per-cpu entry area (CVE-2023-0597) * kernel: mm/sparsemem: fix race in accessing memory_section->usage (CVE-2023-52489) * kernel: blk-mq: fix IO hang from sbitmap wakeup race (CVE-2024-26671) * kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del (CVE-2024-26961) * kernel: nvme-tcp: fix UAF when detecting digest errors (CVE-2022-48686) * kernel: vt: fix unicode buffer corruption when deleting characters (CVE-2024-35823) * kernel: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (CVE-2021-47393) * kernel: userfaultfd: fix a race between writeprotect and exit_mmap() (CVE-2021-47461) * kernel: scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (CVE-2024-36920) * kernel: mptcp: ensure snd_nxt is properly initialized on connect (CVE-2024-36889) * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564) * kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (CVE-2024-31076) * kernel: drm/radeon: fix UBSAN warning in kv_dpm.c (CVE-2024-40988) * kernel: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CVE-2022-48773) * kernel: bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009) * kernel: xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014) * kernel: sched/deadline: Fix task_struct reference leak (CVE-2024-41023) * kernel: bpf: Fix crash due to out of bounds access into reg2btf_ids. (CVE-2022-48929) * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution: https://access.redhat.com/articles/11258 CVEs: CVE-2021-4204 References: https://access.redhat.com/security/updates/classification/#moderate https://bugzilla.redhat.com/show_bug.cgi?id=2039178 https://bugzilla.redhat.com/show_bug.cgi?id=2043520 https://bugzilla.redhat.com/show_bug.cgi?id=2044578 https://bugzilla.redhat.com/show_bug.cgi?id=2165926 https://bugzilla.redhat.com/show_bug.cgi?id=2269189 https://bugzilla.redhat.com/show_bug.cgi?id=2272811 https://bugzilla.redhat.com/show_bug.cgi?id=2278176 https://bugzilla.redhat.com/show_bug.cgi?id=2278931 https://bugzilla.redhat.com/show_bug.cgi?id=2281190 https://bugzilla.redhat.com/show_bug.cgi?id=2282345 https://bugzilla.redhat.com/show_bug.cgi?id=2282896 https://bugzilla.redhat.com/show_bug.cgi?id=2284515 https://bugzilla.redhat.com/show_bug.cgi?id=2284571 https://bugzilla.redhat.com/show_bug.cgi?id=2293429 https://bugzilla.redhat.com/show_bug.cgi?id=2293684 https://bugzilla.redhat.com/show_bug.cgi?id=2297572 https://bugzilla.redhat.com/show_bug.cgi?id=2298109 https://bugzilla.redhat.com/show_bug.cgi?id=2298412 https://bugzilla.redhat.com/show_bug.cgi?id=2300297 https://bugzilla.redhat.com/show_bug.cgi?id=2300381 https://bugzilla.redhat.com/show_bug.cgi?id=2315210