Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:2758

Опубликовано: 10 мая 2024
Источник: rocky
Оценка: Moderate

Описание

Moderate: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)

  • CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743)

Bug Fix(es):

  • ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:Rocky Linux-27009)

  • mm/mglru: fix underprotected page cache (JIRA:Rocky Linux-29235)

  • [EMR] [TBOOT OS] SUT could not go to S3 state with Rocky Linux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:Rocky Linux-29673)

  • system hangs completely - NMI not possible (JIRA:Rocky Linux-30678)

  • ice 0000:6f:00.0: PTP failed to get time (JIRA:Rocky Linux-30110)

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
kernel-64k-debug-develaarch64427.16.1.el9_4kernel-64k-debug-devel-5.14.0-427.16.1.el9_4.aarch64.rpm
kernel-64k-debug-devel-matchedaarch64427.16.1.el9_4kernel-64k-debug-devel-matched-5.14.0-427.16.1.el9_4.aarch64.rpm
kernel-64k-develaarch64427.16.1.el9_4kernel-64k-devel-5.14.0-427.16.1.el9_4.aarch64.rpm
kernel-64k-devel-matchedaarch64427.16.1.el9_4kernel-64k-devel-matched-5.14.0-427.16.1.el9_4.aarch64.rpm
kernel-debug-develaarch64427.16.1.el9_4kernel-debug-devel-5.14.0-427.16.1.el9_4.aarch64.rpm
kernel-debug-devel-matchedaarch64427.16.1.el9_4kernel-debug-devel-matched-5.14.0-427.16.1.el9_4.aarch64.rpm
kernel-develaarch64427.16.1.el9_4kernel-devel-5.14.0-427.16.1.el9_4.aarch64.rpm
kernel-devel-matchedaarch64427.16.1.el9_4kernel-devel-matched-5.14.0-427.16.1.el9_4.aarch64.rpm
kernel-docnoarch427.16.1.el9_4kernel-doc-5.14.0-427.16.1.el9_4.noarch.rpm
kernel-headersaarch64427.16.1.el9_4kernel-headers-5.14.0-427.16.1.el9_4.aarch64.rpm

Показывать по

Связанные уязвимости

oracle-oval
больше 2 лет назад

ELSA-2024-2758: kernel security and bug fix update (MODERATE)

CVSS3: 6.5
ubuntu
больше 2 лет назад

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

CVSS3: 6.5
redhat
почти 3 года назад

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

CVSS3: 6.5
nvd
больше 2 лет назад

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

CVSS3: 6.5
debian
больше 2 лет назад

A Marvin vulnerability side-channel leakage was found in the RSA decry ...