Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:2758

Опубликовано: 10 мая 2024
Источник: rocky
Оценка: Moderate

Описание

Moderate: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)

  • CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743)

Bug Fix(es):

  • ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:Rocky Linux-27009)

  • mm/mglru: fix underprotected page cache (JIRA:Rocky Linux-29235)

  • [EMR] [TBOOT OS] SUT could not go to S3 state with Rocky Linux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:Rocky Linux-29673)

  • system hangs completely - NMI not possible (JIRA:Rocky Linux-30678)

  • ice 0000:6f:00.0: PTP failed to get time (JIRA:Rocky Linux-30110)

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
bpftoolx86_64427.16.1.el9_4bpftool-7.3.0-427.16.1.el9_4.x86_64.rpm
kernelx86_64427.16.1.el9_4kernel-5.14.0-427.16.1.el9_4.x86_64.rpm
kernel-abi-stablelistsnoarch427.16.1.el9_4kernel-abi-stablelists-5.14.0-427.16.1.el9_4.noarch.rpm
kernel-corex86_64427.16.1.el9_4kernel-core-5.14.0-427.16.1.el9_4.x86_64.rpm
kernel-debugx86_64427.16.1.el9_4kernel-debug-5.14.0-427.16.1.el9_4.x86_64.rpm
kernel-debug-corex86_64427.16.1.el9_4kernel-debug-core-5.14.0-427.16.1.el9_4.x86_64.rpm
kernel-debug-modulesx86_64427.16.1.el9_4kernel-debug-modules-5.14.0-427.16.1.el9_4.x86_64.rpm
kernel-debug-modules-corex86_64427.16.1.el9_4kernel-debug-modules-core-5.14.0-427.16.1.el9_4.x86_64.rpm
kernel-debug-modules-extrax86_64427.16.1.el9_4kernel-debug-modules-extra-5.14.0-427.16.1.el9_4.x86_64.rpm
kernel-debug-uki-virtx86_64427.16.1.el9_4kernel-debug-uki-virt-5.14.0-427.16.1.el9_4.x86_64.rpm

Показывать по

Связанные CVE

CVE-2023-6240
CVE-2024-25742
CVE-2024-25743

Ссылки на источники

Исправления

Связанные уязвимости

oracle-oval логотип

ELSA-2024-2758

oracle-oval
около 1 года назад

ELSA-2024-2758: kernel security and bug fix update (MODERATE)

ubuntu логотип

CVE-2023-6240

CVSS3: 6.5
ubuntu
больше 1 года назад

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

redhat логотип

CVE-2023-6240

CVSS3: 6.5
redhat
больше 1 года назад

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

nvd логотип

CVE-2023-6240

CVSS3: 6.5
nvd
больше 1 года назад

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

debian логотип

CVE-2023-6240

CVSS3: 6.5
debian
больше 1 года назад

A Marvin vulnerability side-channel leakage was found in the RSA decry ...