Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CentOS kernel updates prevent data leaks and crashes
published 2 years ago
Summary
Recent updates to the CentOS kernel address three weaknesses: a storage interface could let untrusted devices tamper with data, the audio system could freeze when devices disconnect, and the network code could read beyond its limits. These issues could lead to system instability or give attackers a way to compromise the machine. Install the latest kernel packages (kernel, kernel-debug, kernel-devel, etc.) as soon as possible.
What to do
- Update centos bpftool to version 3.10.0-1160.119.1.el7.tuxcare.els4.
- Update centos kernel to version 3.10.0-1160.119.1.el7.tuxcare.els4.
- Update centos kernel-debug to version 3.10.0-1160.119.1.el7.tuxcare.els4.
- Update centos kernel-debug-devel to version 3.10.0-1160.119.1.el7.tuxcare.els4.
- Update centos kernel-devel to version 3.10.0-1160.119.1.el7.tuxcare.els4.
- Update centos kernel-headers to version 3.10.0-1160.119.1.el7.tuxcare.els4.
- Update centos kernel-tools to version 3.10.0-1160.119.1.el7.tuxcare.els4.
- Update centos kernel-tools-libs to version 3.10.0-1160.119.1.el7.tuxcare.els4.
- Update centos kernel-tools-libs-devel to version 3.10.0-1160.119.1.el7.tuxcare.els4.
- Update centos perf to version 3.10.0-1160.119.1.el7.tuxcare.els4.
- Update centos python-perf to version 3.10.0-1160.119.1.el7.tuxcare.els4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS:7 | centos | bpftool |
< 3.10.0-1160.119.1.el7.tuxcare.els4 Fix: upgrade to 3.10.0-1160.119.1.el7.tuxcare.els4
|
| TuxCare:CentOS:7 | centos | kernel |
< 3.10.0-1160.119.1.el7.tuxcare.els4 Fix: upgrade to 3.10.0-1160.119.1.el7.tuxcare.els4
|
| TuxCare:CentOS:7 | centos | kernel-debug |
< 3.10.0-1160.119.1.el7.tuxcare.els4 Fix: upgrade to 3.10.0-1160.119.1.el7.tuxcare.els4
|
| TuxCare:CentOS:7 | centos | kernel-debug-devel |
< 3.10.0-1160.119.1.el7.tuxcare.els4 Fix: upgrade to 3.10.0-1160.119.1.el7.tuxcare.els4
|
| TuxCare:CentOS:7 | centos | kernel-devel |
< 3.10.0-1160.119.1.el7.tuxcare.els4 Fix: upgrade to 3.10.0-1160.119.1.el7.tuxcare.els4
|
| TuxCare:CentOS:7 | centos | kernel-headers |
< 3.10.0-1160.119.1.el7.tuxcare.els4 Fix: upgrade to 3.10.0-1160.119.1.el7.tuxcare.els4
|
| TuxCare:CentOS:7 | centos | kernel-tools |
< 3.10.0-1160.119.1.el7.tuxcare.els4 Fix: upgrade to 3.10.0-1160.119.1.el7.tuxcare.els4
|
| TuxCare:CentOS:7 | centos | kernel-tools-libs |
< 3.10.0-1160.119.1.el7.tuxcare.els4 Fix: upgrade to 3.10.0-1160.119.1.el7.tuxcare.els4
|
| TuxCare:CentOS:7 | centos | kernel-tools-libs-devel |
< 3.10.0-1160.119.1.el7.tuxcare.els4 Fix: upgrade to 3.10.0-1160.119.1.el7.tuxcare.els4
|
| TuxCare:CentOS:7 | centos | perf |
< 3.10.0-1160.119.1.el7.tuxcare.els4 Fix: upgrade to 3.10.0-1160.119.1.el7.tuxcare.els4
|
| TuxCare:CentOS:7 | centos | python-perf |
< 3.10.0-1160.119.1.el7.tuxcare.els4 Fix: upgrade to 3.10.0-1160.119.1.el7.tuxcare.els4
|
Original advisory text
kernel: Fix of 3 CVEs
- xen/blkfront: force data bouncing when backend is untrusted {CVE-2022-33742}
- ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600}
- net: fix out-of-bounds access in ops_init {CVE-2024-36883}
- ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600}
- net: fix out-of-bounds access in ops_init {CVE-2024-36883}
References
- https://errata.tuxcare.com/centos7-els/CLSA-2024-1725389829.html Vendor Advisory
Timeline
Published3 Sep 2024
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2024-1725389829 · OSV
Track software like this
Free during beta