{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2024:10282","synopsis":"Low: kernel-rt:4.18.0 security update","severity":"SEVERITY_LOW","topic":"An update is available for kernel-rt.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* kernel: media: edia: dvbdev: fix a use-after-free (CVE-2024-27043)\n\n* kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2278445","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2278445","description":""},{"ticket":"2293429","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2293429","description":""}],"cves":[{"name":"CVE-2024-27043","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-27043","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"},{"name":"CVE-2024-38564","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-38564","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"}],"references":[],"publishedAt":"2024-12-19T04:18:13.579534Z","rpms":{"Rocky Linux 8":{"nvras":["kernel-rt-0:4.18.0-553.30.1.rt7.371.el8_10.src.rpm","kernel-rt-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-core-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-debug-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-debug-core-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-debug-debuginfo-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-debug-devel-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-debuginfo-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-debug-kvm-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-debug-modules-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-debug-modules-extra-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-devel-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-kvm-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-modules-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm","kernel-rt-modules-extra-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[]}

Rocky Linux: RLSA-2024:10282 kernel-rt Security Advisories Updates

December 19, 2024
An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

Summary

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list


RPMs

kernel-rt-0:4.18.0-553.30.1.rt7.371.el8_10.src.rpm

kernel-rt-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-core-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-debug-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-debug-core-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-debug-debuginfo-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-debug-devel-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-debuginfo-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-debug-kvm-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-debug-modules-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-debug-modules-extra-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-devel-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-kvm-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-modules-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

kernel-rt-modules-extra-0:4.18.0-553.30.1.rt7.371.el8_10.x86_64.rpm

References

No References

CVEs

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38564

Severity
Name: RLSA-2024:10282
Affected Products: Rocky Linux 8

Fixes

https://bugzilla.redhat.com/show_bug.cgi?id=2278445

https://bugzilla.redhat.com/show_bug.cgi?id=2293429


Related News