RHSA-2024:5363 Red Hat Security Advisory: kernel security update
kernel: net: netlink: af_netlink: Prevent empty skb by adding a check on len. kernel: wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() kernel: ipvlan: add ipvlan_route_v6_outbound() helper kernel: platform/x86: wmi: Fix opening of char device kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application kernel: phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP kernel: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain kernel: cifs: fix underflow in parse_server_interfaces() kernel: igc: avoid returning frame twice in XDP_REDIRECT kernel: nfs: fix panic when nfs4_ff_layout_prepare_ds() fails kernel: wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete kernel: wifi: mt76: mt7925e: fix use-after-free in free_irq() kernel: wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work kernel: netfilter: nf_tables: do not compare internal table flags on updates kernel: ipv6: fix potential &#34;struct net&#34; leak in inet6_rtm_getaddr() kernel: wifi: iwlwifi: mvm: don&#39;t set the MFP flag for the GTK kernel: ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound kernel: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes kernel: efi: fix panic in kdump kernel kernel: vt: fix unicode buffer corruption when deleting characters kernel: wifi: iwlwifi: dbg-tlv: ensure NUL termination kernel: eeprom: at24: fix memory corruption race condition kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work kernel: netfilter: nf_tables: flush pending destroy work before exit_net release kernel: ice: fix memory corruption bug with suspend and rebuild kernel: wifi: cfg80211: check A-MSDU format more carefully kernel: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path kernel: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation kernel: i40e: fix vf may be used uninitialized in this function warning kernel: tls: fix missing memory barrier in tls_init kernel: ipv6: Fix potential uninit-value access in __ip6_make_skb() kernel: wifi: iwlwifi: mvm: guard against invalid STA ID on removal kernel: wifi: iwlwifi: read txq-&gt;read_ptr under lock kernel: net: core: reject skb_copy(_expand) for fraglist GSO skbs kernel: wifi: nl80211: don&#39;t free NULL coalescing rule kernel: net: kernel: UAF in network route management kernel: virtio: delete vq in vp_find_vqs_msix() when request_irq() fails kernel: tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). kernel: cxl/region: Fix cxlr_pmem leaks kernel: net: openvswitch: fix overwriting ct original tuple for ICMPv6 kernel: wifi: brcmfmac: pcie: handle randbuf allocation failure kernel: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() kernel: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() kernel: net: do not leave a dangling sk pointer, when socket creation fails kernel: netns: Make get_net_ns() handle zero refcount net kernel: ipv6: prevent possible NULL deref in fib6_nh_init()
CVSS v3.1 score: 5.5