CVE-2024-42272
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Aug 17, 2024
CISA due date
—
Cloudanix analysis
Schedule a fix
SSVC: Track
A bug in the Linux kernel's network handling can make systems crash or act unpredictably when certain traffic rules are set up, so organizations should install the latest kernel updates.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
The flaw leaves padding bytes uninitialized in zones_ht_key after increasing its size with a struct net pointer, causing rhashtable_lookup_fast and tcf_ct_flow_table_get to read uninitialized memory and trigger KMSAN uninit-value reports.
Why it matters to the business
Systems running affected Linux kernels may experience crashes or unstable network traffic classification when tc actions are configured, leading to service disruptions on servers and network devices until patched.
How an attack unfolds
An attacker with local access crafts a netlink message to add a conntrack action via tc, reaching tcf_ct_init which calls tcf_ct_flow_table_get; the uninitialized padding in the lookup key is dereferenced inside rhashtable operations, resulting in kernel memory safety violations.
How to fix it
Upgrade the Linux kernel to the commit 0c3836482481200ead7b416ca80c68a29cfdaabd or later stable release containing the padding fix in sched/act_ct.c.
How to confirm the fix worked
Verify the running kernel contains commit 0c3836482481200ead7b416ca80c68a29cfdaabd; recompile with KMSAN and confirm absence of uninit-value reports in tcf_ct_flow_table_get; test tc action creation under load.
Typical attack path
- Obtain local user or root access on target Linux system
- Craft and send netlink rtnetlink message to tc_ctl_action
- Invoke tcf_action_init leading to tcf_ct_init
- Trigger tcf_ct_flow_table_get performing rhashtable_lookup_fast on uninitialized key
- Cause kernel crash or undefined behavior via uninit-value access
How to detect it
Search kernel logs and dmesg for KMSAN reports mentioning tcf_ct_flow_table_get, rhashtable_lookup_fast, or zones_ht_key; inspect netlink traffic or tc action creation events preceding crashes.
- BUG: KMSAN: uninit-value in tcf_ct_flow_table_get
- tcf_ct_flow_table_get+0x611/0x2260 net/sched/act_ct.c:329
- Local variable key created at: tcf_ct_flow_table_get+0x4a/0x2260 net/sched/act_ct.c:324
What your security team should do
- Immediately update all affected Linux distributions to a kernel containing commit 0c3836482481200ead7b416ca80c68a29cfdaabd
- Restrict unprivileged users from loading or configuring tc actions until patched
- Monitor kernel logs for KMSAN or similar memory safety reports referencing act_ct
- Prioritize patching on systems exposed to untrusted local users or containers
The record
In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increased lookup key size from 2 bytes to 16 bytes, because zones_ht_key got a struct net pointer. Make sure rhashtable_lookup() is not using the padding bytes which are not initialized. BUG: KMSAN: uninit-value in rht_ptr_rcu include/linux/rhashtable.h:376 [inline] BUG: KMSAN: uninit-value in __rhashtable_lookup include/linux/rhashtable.h:607 [inline] BUG: KMSAN: uninit-value in rhashtable_lookup include/linux/rhashtable.h:646 [inline] BUG: KMSAN: uninit-value in rhashtable_lookup_fast include/linux/rhashtable.h:672 [inline] BUG: KMSAN: uninit-value in tcf_ct_flow_table_get+0x611/0x2260 net/sched/act_ct.c:329 rht_ptr_rcu include/linux/rhashtable.h:376 [inline] __rhashtable_lookup include/linux/rhashtable.h:607 [inline] rhashtable_lookup include/linux/rhashtable.h:646 [inline] rhashtable_lookup_fast include/linux/rhashtable.h:672 [inline] tcf_ct_flow_table_get+0x611/0x2260 net/sched/act_ct.c:329 tcf_ct_init+0xa67/0x2890 net/sched/act_ct.c:1408 tcf_action_init_1+0x6cc/0xb30 net/sched/act_api.c:1425 tcf_action_init+0x458/0xf00 net/sched/act_api.c:1488 tcf_action_add net/sched/act_api.c:2061 [inline] tc_ctl_action+0x4be/0x19d0 net/sched/act_api.c:2118 rtnetlink_rcv_msg+0x12fc/0x1410 net/core/rtnetlink.c:6647 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2550 rtnetlink_rcv+0x34/0x40 net/core/rtnetlink.c:6665 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0xf52/0x1260 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x10da/0x11e0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 ____sys_sendmsg+0x877/0xb60 net/socket.c:2597 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2651 __sys_sendmsg net/socket.c:2680 [inline] __do_sys_sendmsg net/socket.c:2689 [inline] __se_sys_sendmsg net/socket.c:2687 [inline] __x64_sys_sendmsg+0x307/0x4a0 net/socket.c:2687 x64_sys_call+0x2dd6/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Local variable key created at: tcf_ct_flow_table_get+0x4a/0x2260 net/sched/act_ct.c:324 tcf_ct_init+0xa67/0x2890 net/sched/act_ct.c:1408
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:9 | bpftool | 0 | 7.3.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-devel | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-devel | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-devel-matched | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules-extra | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-abi-stablelists | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-cross-headers | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-debug | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-debug-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-debug-devel | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-debug-devel-matched | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules-extra | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-debug-uki-virt | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-devel | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-devel-matched | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-doc | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-headers | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-modules | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-modules-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-modules-extra | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-rt | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-rt-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-devel | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-rt-devel | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules-extra | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-tools | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-tools-libs | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-tools-libs-devel | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-uki-virt | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | libperf | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | perf | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | python3-perf | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | rtla | 0 | 5.14.0-427.40.1.el9_4 |
| AlmaLinux:9 | rv | 0 | 5.14.0-427.40.1.el9_4 |
| Debian:11 | linux | 0 | No fix |
| Debian:11 | linux | 0 | 5.10.226-1 |
| Debian:11 | linux-6.1 | 0 | 6.1.119-1~deb11u1 |
| Debian:12 | linux | 0 | 6.1.106-1 |
| Debian:13 | linux | 0 | 6.10.4-1 |
| Linux | Kernel | 0 | 5.10.224 |
| Mageia:9 | kernel | 0 | 6.6.50-1.mga9 |
| Mageia:9 | kernel-linus | 0 | 6.6.50-1.mga9 |
| Mageia:9 | kmod-virtualbox | 0 | 7.0.20-53.mga9 |
| Mageia:9 | kmod-xtables-addons | 0 | 3.24-61.mga9 |
| Red Hat:enterprise_linux:9::appstream | bpftool | 0 | 0:7.3.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | bpftool-debuginfo | 0 | 0:7.3.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel-matched | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-extra | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-cross-headers | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-uki-virt | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel-matched | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-doc | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-headers | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-extra | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-devel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-kvm | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-devel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-kvm | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-extra | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs-devel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-uki-virt | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | libperf | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | libperf-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | perf | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | perf-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | python3-perf | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | python3-perf-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | rtla | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | rv | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | bpftool | 0 | 0:7.3.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | bpftool-debuginfo | 0 | 0:7.3.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel-matched | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-extra | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-abi-stablelists | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-cross-headers | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel-matched | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-extra | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-uki-virt | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel-matched | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-doc | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-headers | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-extra | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-core | 0 | 0:5.14.0-427.40.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-427.40.1.el9_4 |
Related vulnerabilities
- CVE-2024-53197 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix… Also affects bpftool
- CVE-2024-53150 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix… Also affects bpftool
- CVE-2024-2201 A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed… Also affects bpftool
- CVE-2024-53122 In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing… Also affects bpftool
- CVE-2024-53113 In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer… Also affects bpftool
- CVE-2024-53104 In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip… Also affects bpftool
- CVE-2023-52922 In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in… Also affects bpftool
- CVE-2024-53088 In the Linux kernel, the following vulnerability has been resolved: i40e: fix race… Also affects bpftool