Linux · AlmaLinux · Security advisory · August 8, 2024

ALSA-2024:5102: Security update for 12 packages

ALSA-2024:5102, released August 8, 2024, fixes 149 CVEs across 12 products. One of them is being exploited (CVE-2024-36971); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
149
None rated Critical
Exploited
1
CVE-2024-36971
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0879
95th percentile

Priority of the 149 CVEs

Patch now 1 Urgent 0 High 51 Routine 97

Fixed package versions

ProductReleaseFixed in
kernel-rtalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-corealmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debugalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-corealmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-develalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-kvmalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-modulesalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-modules-extraalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-develalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-kvmalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-modulesalmalinux 84.18.0-553.16.1.rt7.357.el8_10
kernel-rt-modules-extraalmalinux 84.18.0-553.16.1.rt7.357.el8_10

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2024-36971 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0270 KEVExploited
High CVE-2021-47548 kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...9.8 0.0136 None reported
High CVE-2024-36886 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0131 None reported
High CVE-2023-52832 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...9.1 0.0126 None reported
High CVE-2024-38573 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.5 0.0100 None reported
High CVE-2024-36896 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...9.1 0.0092 None reported
High CVE-2022-48747 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...7.5 0.0092 None reported
High CVE-2024-36904 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0061 None reported
High CVE-2024-36921 wifi: iwlwifi: mvm: guard against invalid STA ID on removal7.8 0.0035 None reported
High CVE-2024-35937 wifi: cfg80211: check A-MSDU format more carefully7.1 0.0034 None reported
High CVE-2023-52530 kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p...7.8 0.0034 None reported
High CVE-2024-39502 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0031 None reported
High CVE-2023-52469 linux: In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse...7.8 0.0029 None reported
High CVE-2024-40927 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0029 None reported
High CVE-2024-36960 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.1 0.0029 None reported
High CVE-2024-38538 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.1 0.0028 None reported
High CVE-2024-36978 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0028 None reported
High CVE-2024-26852 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p...7.8 0.0027 None reported
High CVE-2023-52864 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0027 None reported
High CVE-2024-26704 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0027 None reported
High CVE-2024-26925 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.0 0.0027 None reported
High CVE-2024-26772 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0027 None reported
High CVE-2024-36016 linux: In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_r...7.8 0.0027 None reported
High CVE-2023-52707 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p...7.8 0.0026 None reported
High CVE-2024-27065 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0026 None reported
Showing 1 to 25 of 149 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.