Linux · AlmaLinux · Security advisory · August 28, 2024

ALSA-2024:5928: Security update for 62 packages

ALSA-2024:5928, released August 28, 2024, fixes 41 CVEs across 62 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
41
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0222
82nd percentile

Priority of the 41 CVEs

Patch now 0 Urgent 0 High 21 Routine 20

Fixed package versions

ProductReleaseFixed in
bpftoolalmalinux 97.3.0-427.33.1.el9_4
kernelalmalinux 95.14.0-427.33.1.el9_4
kernel-64kalmalinux 95.14.0-427.33.1.el9_4
kernel-64k-corealmalinux 95.14.0-427.33.1.el9_4
kernel-64k-debugalmalinux 95.14.0-427.33.1.el9_4
kernel-64k-debug-corealmalinux 95.14.0-427.33.1.el9_4
kernel-64k-debug-develalmalinux 95.14.0-427.33.1.el9_4
kernel-64k-debug-devel-matchedalmalinux 95.14.0-427.33.1.el9_4
kernel-64k-debug-modulesalmalinux 95.14.0-427.33.1.el9_4
kernel-64k-debug-modules-corealmalinux 95.14.0-427.33.1.el9_4
kernel-64k-debug-modules-extraalmalinux 95.14.0-427.33.1.el9_4
kernel-64k-develalmalinux 95.14.0-427.33.1.el9_4
kernel-64k-devel-matchedalmalinux 95.14.0-427.33.1.el9_4
kernel-64k-modulesalmalinux 95.14.0-427.33.1.el9_4
kernel-64k-modules-corealmalinux 95.14.0-427.33.1.el9_4
kernel-64k-modules-extraalmalinux 95.14.0-427.33.1.el9_4
kernel-abi-stablelistsalmalinux 95.14.0-427.33.1.el9_4
kernel-corealmalinux 95.14.0-427.33.1.el9_4
kernel-cross-headersalmalinux 95.14.0-427.33.1.el9_4
kernel-debugalmalinux 95.14.0-427.33.1.el9_4
kernel-debug-corealmalinux 95.14.0-427.33.1.el9_4
kernel-debug-develalmalinux 95.14.0-427.33.1.el9_4
kernel-debug-devel-matchedalmalinux 95.14.0-427.33.1.el9_4
kernel-debug-modulesalmalinux 95.14.0-427.33.1.el9_4
kernel-debug-modules-corealmalinux 95.14.0-427.33.1.el9_4
kernel-debug-modules-extraalmalinux 95.14.0-427.33.1.el9_4
kernel-debug-uki-virtalmalinux 95.14.0-427.33.1.el9_4
kernel-develalmalinux 95.14.0-427.33.1.el9_4
kernel-devel-matchedalmalinux 95.14.0-427.33.1.el9_4
kernel-docalmalinux 95.14.0-427.33.1.el9_4
kernel-headersalmalinux 95.14.0-427.33.1.el9_4
kernel-modulesalmalinux 95.14.0-427.33.1.el9_4
kernel-modules-corealmalinux 95.14.0-427.33.1.el9_4
kernel-modules-extraalmalinux 95.14.0-427.33.1.el9_4
kernel-rtalmalinux 95.14.0-427.33.1.el9_4
kernel-rt-corealmalinux 95.14.0-427.33.1.el9_4
kernel-rt-debugalmalinux 95.14.0-427.33.1.el9_4
kernel-rt-debug-corealmalinux 95.14.0-427.33.1.el9_4
kernel-rt-debug-develalmalinux 95.14.0-427.33.1.el9_4
kernel-rt-debug-modulesalmalinux 95.14.0-427.33.1.el9_4
kernel-rt-debug-modules-corealmalinux 95.14.0-427.33.1.el9_4
kernel-rt-debug-modules-extraalmalinux 95.14.0-427.33.1.el9_4
kernel-rt-develalmalinux 95.14.0-427.33.1.el9_4
kernel-rt-modulesalmalinux 95.14.0-427.33.1.el9_4
kernel-rt-modules-corealmalinux 95.14.0-427.33.1.el9_4
kernel-rt-modules-extraalmalinux 95.14.0-427.33.1.el9_4
kernel-toolsalmalinux 95.14.0-427.33.1.el9_4
kernel-tools-libsalmalinux 95.14.0-427.33.1.el9_4
kernel-tools-libs-develalmalinux 95.14.0-427.33.1.el9_4
kernel-uki-virtalmalinux 95.14.0-427.33.1.el9_4
kernel-zfcpdumpalmalinux 95.14.0-427.33.1.el9_4
kernel-zfcpdump-corealmalinux 95.14.0-427.33.1.el9_4
kernel-zfcpdump-develalmalinux 95.14.0-427.33.1.el9_4
kernel-zfcpdump-devel-matchedalmalinux 95.14.0-427.33.1.el9_4
kernel-zfcpdump-modulesalmalinux 95.14.0-427.33.1.el9_4
kernel-zfcpdump-modules-corealmalinux 95.14.0-427.33.1.el9_4
kernel-zfcpdump-modules-extraalmalinux 95.14.0-427.33.1.el9_4
libperfalmalinux 95.14.0-427.33.1.el9_4
perfalmalinux 95.14.0-427.33.1.el9_4
python3-perfalmalinux 95.14.0-427.33.1.el9_4
rtlaalmalinux 95.14.0-427.33.1.el9_4
rvalmalinux 95.14.0-427.33.1.el9_4

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2024-26581 kernel-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...7.8 0.0222 None reported
High CVE-2024-42152 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system7.8 0.0073 None reported
High CVE-2024-40911 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0041 None reported
High CVE-2024-40941 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0040 None reported
High CVE-2024-40929 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0036 None reported
High CVE-2024-40978 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0032 None reported
High CVE-2024-41041 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system7.8 0.0029 None reported
High CVE-2024-38538 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.1 0.0028 None reported
High CVE-2024-26925 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.0 0.0027 None reported
High CVE-2024-40939 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0026 None reported
High CVE-2024-41090 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system7.8 0.0026 None reported
High CVE-2024-41091 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system7.8 0.0026 None reported
High CVE-2024-38579 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0025 None reported
High CVE-2024-26855 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0025 None reported
High CVE-2024-26668 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.1 0.0024 None reported
High CVE-2024-35896 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.1 0.0023 None reported
High CVE-2024-40912 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0022 None reported
High CVE-2024-27020 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.0 0.0022 None reported
High CVE-2024-41076 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system7.8 0.0021 None reported
High CVE-2024-35898 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.0 0.0020 None reported
High CVE-2024-26810 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bug...7.8 0.0020 None reported
Routine CVE-2024-40983 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0088 None reported
Routine CVE-2024-38544 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...6.3 0.0082 None reported
Routine CVE-2024-40957 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0073 None reported
Routine CVE-2024-42110 net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()5.5 0.0065 None reported
Showing 1 to 25 of 41 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.