RHSA-2024:7003HighCVSS 7.1

Red Hat Security Advisory: kernel-rt security update

Published
September 24, 2024
Last Modified
November 6, 2026

🔗 CVE IDs covered (3)

CVE-2024-26993 →CVE-2024-36886 →CVE-2024-41071 · no record

📋 Description

CVE-2024-26993 — kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() CVE-2024-36886 — kernel: TIPC message reassembly use-after-free remote code execution vulnerability CVE-2024-41071 — kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing

🎯 Affected products32

  • Red Hat Enterprise Linux NFV TUS (v.8.4)
  • Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-0:4.18.0-305.141.1.rt7.217.el8_4.src as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-0:4.18.0-305.141.1.rt7.217.el8_4.src as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-core-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-core-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-debug-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-debug-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-debug-core-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-debug-core-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-debug-debuginfo-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-debug-debuginfo-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-debug-devel-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-debug-devel-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-debug-kvm-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-debug-modules-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-debug-modules-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-debug-modules-extra-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-debug-modules-extra-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-debuginfo-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-debuginfo-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-debuginfo-common-x86_64-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-debuginfo-common-x86_64-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-devel-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-devel-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • kernel-rt-kvm-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-modules-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux NFV TUS (v.8.4)
  • kernel-rt-modules-0:4.18.0-305.141.1.rt7.217.el8_4.x86_64 as a component of Red Hat Enterprise Linux RT TUS (v.8.4)
  • +2 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: The TIPC module is not automatically loaded in default configurations. When required, administrative privileges are required to explicitly load this module. To determine if the TIPC module is loaded, use the following command: # grep tipc /proc/modules Look for output similar to the following: tipc 479232 0 - Live 0xffffffffc1ba5000 ip6_udp_tunnel 16384 1 tipc, Live 0xffffffffc1b9b000 udp_tunnel 32768 1 tipc, Live 0xffffffffc1b8b000 Loading the module can be prevented with the following instructions: # echo "install tipc /bin/true" >> /etc/modprobe.d/disable-tipc.conf The system will need to be restarted if the module is loaded. In most circumstances, the TIPC kernel module will be unable to be unloaded while any network interfaces are active and the protocol is in use. If the system requires this module to work correctly, this mitigation may not be suitable. Workaround: There are no mitigations for the flaw. Please update your system for fixes.

🔗 References (6)