Kernel Security and Bug Fix Update for AlmaLinux: Addressing Multiple Vulnerabilities
Summary
ALSA-2024:3306: Moderate: kernel security and bug fix update. Affects bpftool versions < 7.3.0-427.18.1.el9_4. Fixed in 7.3.0-427.18.1.el9_4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise Linux distribution, relies on a stable and secure kernel to ensure optimal performance and security. This update addresses several vulnerabilities within the kernel packages, which could potentially compromise system integrity and security.
Vulnerability Detail
This vulnerability arises from issues within the netfilter subsystem of the Linux kernel, specifically related to the nf_tables framework. The vulnerabilities include improper handling of anonymous sets with timeout flags, which could lead to denial of service or unexpected behavior in network traffic management. The identified CVEs are CVE-2024-26642, CVE-2024-26643, CVE-2024-26673, and CVE-2024-26804, each posing risks such as resource exhaustion and incorrect protocol handling.
How To Fix
Minimum fixed version
7.3.0-427.18.1.el9_4
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable the affected features of the netfilter subsystem until the kernel is updated. This can be done by modifying the configuration files related to netfilter settings, but it is recommended to apply the update as soon as possible for complete protection.
Conclusion
In summary, the kernel security and bug fix update for AlmaLinux addresses critical vulnerabilities that could impact system security and performance. Users are strongly advised to update their kernel packages to the latest fixed versions to mitigate potential risks.
See every vulnerability recorded for bpftool →
FAQ
The update addresses vulnerabilities related to netfilter's nf_tables, including improper handling of anonymous sets and protocol number sanitization.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If immediate updates are not possible, consider disabling the affected features of the netfilter subsystem as a temporary workaround.
Yes, not applying the update may leave your system vulnerable to denial of service attacks and other security issues related to network traffic management.
Detailed information about the vulnerabilities can be found in the CVE entries: CVE-2024-26642, CVE-2024-26643, CVE-2024-26673, and CVE-2024-26804.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
