What is RHSA-2024:7005?

RHSA-2024:7005 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: kernel-rt security update

Which CVE IDs does RHSA-2024:7005 cover?

RHSA-2024:7005 covers the following CVE IDs: CVE-2024-36899, CVE-2024-41071, CVE-2024-42139. CVE-2024-36899, CVE-2024-42139 have their own detail page on EchelonGraph Pulse. EchelonGraph holds no CVE record for CVE-2024-41071.

What is the CVSS v3 score of RHSA-2024:7005?

RHSA-2024:7005 has a CVSS v3 base score of 6.7, published by Red Hat Product Security.

Which products are affected by RHSA-2024:7005?

RHSA-2024:7005 affects 36 products, including: Red Hat Enterprise Linux Real Time EUS (v.9.2); Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2); kernel-rt-0:5.14.0-284.85.1.rt14.370.el9_2.src as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2); kernel-rt-0:5.14.0-284.85.1.rt14.370.el9_2.src as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2); kernel-rt-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2); and others — see the full list on the advisory page.

RHSA-2024:7005HighCVSS 6.7

Red Hat Security Advisory: kernel-rt security update

Vendor

Red Hat Product Security

Published

September 24, 2024

Last Modified

November 6, 2026

🔗 CVE IDs covered (3)

CVE-2024-36899 →CVE-2024-41071 · no recordCVE-2024-42139 →

📋 Description

CVE-2024-36899 — kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify CVE-2024-41071 — kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing CVE-2024-42139 — kernel: ice: Fix improper extts handling

🎯 Affected products36

Red Hat Enterprise Linux Real Time EUS (v.9.2)
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-0:5.14.0-284.85.1.rt14.370.el9_2.src as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-0:5.14.0-284.85.1.rt14.370.el9_2.src as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-core-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-core-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-debug-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-debug-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-debug-core-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-debug-core-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-debug-debuginfo-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-debug-debuginfo-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-debug-devel-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-debug-devel-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-debug-kvm-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-debug-modules-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-debug-modules-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-debug-modules-core-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-debug-modules-core-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-debug-modules-extra-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-debug-modules-extra-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-debuginfo-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-debuginfo-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-debuginfo-common-x86_64-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-debuginfo-common-x86_64-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-devel-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.2)
kernel-rt-devel-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
kernel-rt-kvm-0:5.14.0-284.85.1.rt14.370.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)
+6 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: There are no mitigations for the flaw. Please update your system for fixes. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 CVE IDs covered (3)

📋 Description

🎯 Affected products36

✅ Remediation

🔗 References (6)