ALSA-2024:3306
ALSA-2024:3306 · Moderate: kernel security and bug fix update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643) * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642) * kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673) * kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
bpftool AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 7.3.0-427.18.1.el9_4
Update to 7.3.0-427.18.1.el9_4
kernel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-debug AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-debug-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-debug-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-debug-devel-matched AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-debug-modules AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-debug-modules-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-debug-modules-extra AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-devel-matched AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-modules AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-modules-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-64k-modules-extra AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-abi-stablelists AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-cross-headers AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-debug AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-debug-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-debug-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-debug-devel-matched AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
kernel-debug-modules AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 5.14.0-427.18.1.el9_4
Update to 5.14.0-427.18.1.el9_4
Original sources
- https://access.redhat.com/errata/RHSA-2024:3306
- https://bugzilla.redhat.com/2270879
- https://bugzilla.redhat.com/2270881
- https://bugzilla.redhat.com/2272816
- https://bugzilla.redhat.com/2273423
- https://errata.almalinux.org/9/ALSA-2024-3306.html
- https://www.redhat.com/security/data/cve/CVE-2024-26642.html
- https://www.redhat.com/security/data/cve/CVE-2024-26643.html
- https://www.redhat.com/security/data/cve/CVE-2024-26673.html
- https://www.redhat.com/security/data/cve/CVE-2024-26804.html
- https://www.redhat.com/security/data/cve/CVE-2024-35890.html
- https://osv.dev/vulnerability/ALSA-2024:3306