Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CentOS Stream kernel updates stop crashes and data leaks
published 18 days ago
Summary
The latest CentOS Stream kernel packages fix several coding errors that could let attackers cause program crashes, read or write data they shouldn’t, or take control of a system. These problems affect core kernel components, graphics drivers, storage drivers and network code. Update the listed CentOS Stream kernel packages as soon as possible to apply the fixes.
What to do
- Update centos-stream bpftool to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-core to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-cross-headers to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-debug to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-debug-core to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-debug-devel to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-debug-modules to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-debug-modules-extra to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-debug-modules-internal to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-devel to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-headers to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-ipaclones-internal to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-modules to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-modules-extra to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-modules-internal to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-selftests-internal to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-tools to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-tools-libs to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream kernel-tools-libs-devel to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream perf to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update centos-stream python3-perf to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update bpftool to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-core to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-cross-headers to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-debug to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-debug-core to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-debug-devel to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-debug-modules to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-debug-modules-extra to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-debug-modules-internal to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-devel to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-headers to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-ipaclones-internal to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-modules to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-modules-extra to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-modules-internal to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-selftests-internal to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-tools to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-tools-libs to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update kernel-tools-libs-devel to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update perf to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
- Update python3-perf to version 4.18.0-553.6.1.el8_10.tuxcare.els4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS-Stream:8 | centos-stream | bpftool |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-core |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-cross-headers |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-debug |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-debug-core |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-debug-devel |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-debug-modules |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-debug-modules-extra |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-debug-modules-internal |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-devel |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-headers |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-ipaclones-internal |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-modules |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-modules-extra |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-modules-internal |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-selftests-internal |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-tools |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-tools-libs |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | kernel-tools-libs-devel |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | perf |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | centos-stream | python3-perf |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | bpftool |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-core |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-cross-headers |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-debug |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-debug-core |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-debug-devel |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-debug-modules |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-debug-modules-extra |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-debug-modules-internal |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-devel |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-headers |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-ipaclones-internal |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-modules |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-modules-extra |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-modules-internal |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-selftests-internal |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-tools |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-tools-libs |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | kernel-tools-libs-devel |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | perf |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
| TuxCare:CentOS-Stream:8 | – | python3-perf |
< 4.18.0-553.6.1.el8_10.tuxcare.els4 Fix: upgrade to 4.18.0-553.6.1.el8_10.tuxcare.els4
|
Original advisory text
kernel: Fix of 38 CVEs
- drm/amdgpu: Validate TA binary size {CVE-2024-44977}
- drm/amd/display: Avoid overflow from uint32_t to uint8_t {CVE-2024-47661}
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info {CVE-2024-46842}
- ALSA: line6: Fix racy access to midibuf {CVE-2024-44954}
- exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882}
- drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813}
- drm/amdgpu/mes: fix mes ring buffer overflow {CVE-2024-46700}
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285}
- scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673}
- ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987}
- drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}
- ftrace: Fix possible use-after-free issue in ftrace_location() {CVE-2024-38588}
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() {CVE-2024-38588}
- ftrace: Store the order of pages allocated in ftrace_page {CVE-2024-38588}
- ftrace: Check if pages were allocated before calling free_pages() {CVE-2024-38588}
- x86/ibt,ftrace: Search for __fentry__ location {CVE-2024-38588}
- drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723}
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800}
- drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725}
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724}
- Squashfs: sanity check symbolic link size {CVE-2024-46744}
- drm/amd/pm: Fix negative array index read {CVE-2024-46821}
- drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818}
- KVM: x86: do not set st->preempted when going back to user space {CVE-2022-39189}
- net: Return errno in sk->sk_prot->get_port(). {CVE-2023-0461}
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box {CVE-2024-46811}
- ext4: do not create EA inode under buffer lock {CVE-2024-40972}
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create() {CVE-2024-40972}
- ext4: check the return value of ext4_xattr_inode_dec_ref() {CVE-2024-40972}
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() {CVE-2024-40972}
- nvme: avoid double free special payload {CVE-2024-41073}
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL {CVE-2023-52817}
- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071}
- mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280}
- tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284}
- dev/parport: fix the array out-of-bounds risk {CVE-2024-42301}
- parport: Standardize use of printmode {CVE-2024-42301}
- parport: Convert printk(KERN_<LEVEL> to pr_<level> {CVE-2024-42301}
- parport: parport_pc: Mark expected switch fall-through {CVE-2024-42301}
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions {CVE-2024-42265}
- leds: trigger: Unregister sysfs attributes before calling deactivate() {CVE-2024-43830}
- hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758}
- HID: amd_sfh: free driver_data after destroying hid device {CVE-2024-46746}
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes {CVE-2024-46759}
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756}
- netns: Make get_net_ns() handle zero refcount net {CVE-2024-40958}
- net: make get_net_ns return error if NET_NS is disabled {CVE-2024-40958}
- mm, slub: fix potential memoryleak in kmem_cache_open() {CVE-2021-47466}
- slub: don't panic for memcg kmem cache creation failure {CVE-2021-47466}
- tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665}
- xfs: don't walk off the end of a directory data block {CVE-2024-42084}
- firmware: cs_dsp: Fix overflow checking of wmfw header {CVE-2024-41039}
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757}
- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731}
- drm/amd/display: Avoid overflow from uint32_t to uint8_t {CVE-2024-47661}
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info {CVE-2024-46842}
- ALSA: line6: Fix racy access to midibuf {CVE-2024-44954}
- exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882}
- drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813}
- drm/amdgpu/mes: fix mes ring buffer overflow {CVE-2024-46700}
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285}
- scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673}
- ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987}
- drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}
- ftrace: Fix possible use-after-free issue in ftrace_location() {CVE-2024-38588}
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() {CVE-2024-38588}
- ftrace: Store the order of pages allocated in ftrace_page {CVE-2024-38588}
- ftrace: Check if pages were allocated before calling free_pages() {CVE-2024-38588}
- x86/ibt,ftrace: Search for __fentry__ location {CVE-2024-38588}
- drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723}
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800}
- drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725}
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724}
- Squashfs: sanity check symbolic link size {CVE-2024-46744}
- drm/amd/pm: Fix negative array index read {CVE-2024-46821}
- drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818}
- KVM: x86: do not set st->preempted when going back to user space {CVE-2022-39189}
- net: Return errno in sk->sk_prot->get_port(). {CVE-2023-0461}
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box {CVE-2024-46811}
- ext4: do not create EA inode under buffer lock {CVE-2024-40972}
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create() {CVE-2024-40972}
- ext4: check the return value of ext4_xattr_inode_dec_ref() {CVE-2024-40972}
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() {CVE-2024-40972}
- nvme: avoid double free special payload {CVE-2024-41073}
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL {CVE-2023-52817}
- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071}
- mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280}
- tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284}
- dev/parport: fix the array out-of-bounds risk {CVE-2024-42301}
- parport: Standardize use of printmode {CVE-2024-42301}
- parport: Convert printk(KERN_<LEVEL> to pr_<level> {CVE-2024-42301}
- parport: parport_pc: Mark expected switch fall-through {CVE-2024-42301}
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions {CVE-2024-42265}
- leds: trigger: Unregister sysfs attributes before calling deactivate() {CVE-2024-43830}
- hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758}
- HID: amd_sfh: free driver_data after destroying hid device {CVE-2024-46746}
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes {CVE-2024-46759}
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756}
- netns: Make get_net_ns() handle zero refcount net {CVE-2024-40958}
- net: make get_net_ns return error if NET_NS is disabled {CVE-2024-40958}
- mm, slub: fix potential memoryleak in kmem_cache_open() {CVE-2021-47466}
- slub: don't panic for memcg kmem cache creation failure {CVE-2021-47466}
- tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665}
- xfs: don't walk off the end of a directory data block {CVE-2024-42084}
- firmware: cs_dsp: Fix overflow checking of wmfw header {CVE-2024-41039}
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757}
- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731}
References
- https://errata.tuxcare.com/centos8stream-els/CLSA-2024-1729874131.html Vendor Advisory
- https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2024-1729874131.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-47466 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-39189 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-0461 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-52817 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-26665 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-38588 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-40958 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-40972 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-41013 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-41039 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-41073 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42265 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42280 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42284 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42285 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42301 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-43830 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-43882 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-44954 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-44977 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-44987 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46673 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46722 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46723 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46724 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46725 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46731 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46738 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46744 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46746 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46759 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46800 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46811 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46813 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46818 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46821 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46842 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-47661 Vendor Advisory
Timeline
Published18 Oct 2026
Updated26 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2024-1729874131 · OSV
Track software like this
Free during beta