Open-Source Security Intelligence

Know every vulnerability
before it knows you.

DevGuard continuously monitors your dependencies and alerts you when CVEs like this one affect your stack — with real-time threat intelligence built for developers.

Checkout DevGuardView on GitHub
Search

RHSA-2024:3138

HighCVSS 8 / 10
Published Sep 24, 2024·Last modified May 12, 2026
Affected Components(0)

No affected components available

Description

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Risk Scores
Base Score
8.0

The vulnerability requires local access to the device to be exploited. It is easy for an attacker to exploit this vulnerability. An attacker does not need any special privileges or access rights. No user interaction is needed for the attacker to exploit this vulnerability. The impact is confined to the system where the vulnerability exists. There is a high impact on the confidentiality of the information. There is a low impact on the integrity of the data. There is a high impact on the availability of the system.

Threat Intelligence
7.3

Exploitation activity has been observed. Apply available patches or mitigations urgently.

EPSS
0.36%

The exploit probability is very low. The vulnerability is unlikely to be exploited in the next 30 days.

Exploit
Not available

We did not find any exploit available. Neither in GitHub repositories nor in the Exploit-Database.

Related Vulnerabilities
  • CVE-2019-13631
    Upstream
  • CVE-2019-15505
    Upstream
  • CVE-2020-25656
    Upstream
  • CVE-2021-3753

    A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The highest threat from this vulnerability is to data confidentiality.

    Upstream, EPSS 0.36%
  • CVE-2021-4204
    Upstream
  • CVE-2022-0500
    Upstream
  • CVE-2022-23222
    Upstream
  • CVE-2022-3565
    Upstream
  • CVE-2022-45934
    Upstream
  • CVE-2022-48947
    Upstream
  • CVE-2022-49081
    Upstream
  • CVE-2022-49700
    Upstream
  • CVE-2022-49759
    Upstream
  • CVE-2022-49885
    Upstream
  • CVE-2022-49940
    Upstream
  • CVE-2022-50116
    Upstream
  • CVE-2022-50126
    Upstream
  • CVE-2022-50153
    Upstream
  • CVE-2022-50274
    Upstream
  • CVE-2022-50286
    Upstream
  • CVE-2022-50327
    Upstream
  • CVE-2022-50344
    Upstream
  • CVE-2022-50403

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix undefined behavior in bit shift for ext4_check_flag_values Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds in fs/ext4/ext4.h:591:2 left shift of 1 by 31 places cannot be represented in type 'int' Call Trace: <TASK> dump_stack_lvl+0x7d/0xa5 dump_stack+0x15/0x1b ubsan_epilogue+0xe/0x4e __ubsan_handle_shift_out_of_bounds+0x1e7/0x20c ext4_init_fs+0x5a/0x277 do_one_initcall+0x76/0x430 kernel_init_freeable+0x3b3/0x422 kernel_init+0x24/0x1e0 ret_from_fork+0x1f/0x30 </TASK>

    Upstream
  • CVE-2022-50423
    Upstream
  • CVE-2022-50485
    Upstream
  • CVE-2022-50546
    Upstream
  • CVE-2022-50635
    Upstream
  • CVE-2022-50638
    Upstream
  • CVE-2022-50668
    Upstream
  • CVE-2022-50717
    Upstream
  • CVE-2022-50730
    Upstream
  • CVE-2022-50782
    Upstream
  • CVE-2023-1513

    A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak.

    Upstream, EPSS 0.23%
  • CVE-2023-24023
    Upstream
  • CVE-2023-25775
    Upstream
  • CVE-2023-28464
    Upstream
  • CVE-2023-31083
    Upstream
  • CVE-2023-3567
    Upstream
  • CVE-2023-37453
    Upstream
  • CVE-2023-38409
    Upstream
  • CVE-2023-39189
    Upstream
  • CVE-2023-39192
    Upstream
  • CVE-2023-39193
    Upstream
  • CVE-2023-39194
    Upstream
  • CVE-2023-39198
    Upstream
  • CVE-2023-4133
    Upstream
  • CVE-2023-4244
    Upstream
  • CVE-2023-42754
    Upstream
  • CVE-2023-42755
    Upstream
  • CVE-2023-45863
    Upstream
  • CVE-2023-51779

    bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition.

    Upstream, EPSS 0.26%
  • CVE-2023-51780
    Upstream
  • CVE-2023-52340
    Upstream
  • CVE-2023-52434
    Upstream
  • CVE-2023-52448
    Upstream
  • CVE-2023-52489
    Upstream
  • CVE-2023-52574
    Upstream
  • CVE-2023-52580
    Upstream
  • CVE-2023-52581
    Upstream
  • CVE-2023-52597
    Upstream
  • CVE-2023-52620
    Upstream
  • CVE-2023-52973
    Upstream
  • CVE-2023-53070
    Upstream
  • CVE-2023-53072
    Upstream
  • CVE-2023-53088
    Upstream
  • CVE-2023-53089
    Upstream
  • CVE-2023-53103
    Upstream
  • CVE-2023-53134
    Upstream
  • CVE-2023-53140
    Upstream
  • CVE-2023-53148
    Upstream
  • CVE-2023-53150
    Upstream
  • CVE-2023-53151
    Upstream
  • CVE-2023-53182
    Upstream
  • CVE-2023-53202
    Upstream
  • CVE-2023-53205
    Upstream
  • CVE-2023-53210
    Upstream
  • CVE-2023-53224
    Upstream
  • CVE-2023-53266
    Upstream
  • CVE-2023-53275
    Upstream
  • CVE-2023-53280
    Upstream
  • CVE-2023-53322
    Upstream
  • CVE-2023-53335
    Upstream
  • CVE-2023-53343
    Upstream
  • CVE-2023-53354
    Upstream
  • CVE-2023-53365
    Upstream
  • CVE-2023-53371
    Upstream
  • CVE-2023-53380
    Upstream
  • CVE-2023-53392
    Upstream
  • CVE-2023-53441
    Upstream
  • CVE-2023-53442
    Upstream
  • CVE-2023-53451
    Upstream
  • CVE-2023-53476
    Upstream
  • CVE-2023-53483
    Upstream
  • CVE-2023-53496
    Upstream
  • CVE-2023-53501
    Upstream
  • CVE-2023-53525
    Upstream
  • CVE-2023-53530
    Upstream
  • CVE-2023-53546
    Upstream
  • CVE-2023-53550
    Upstream
  • CVE-2023-53559
    Upstream
  • CVE-2023-53576
    Upstream
  • CVE-2023-53577
    Upstream
  • CVE-2023-53581
    Upstream
  • CVE-2023-53586
    Upstream
  • CVE-2023-53611
    Upstream
  • CVE-2023-53615
    Upstream
  • CVE-2023-53623
    Upstream
  • CVE-2023-53648
    Upstream
  • CVE-2023-53657
    Upstream
  • CVE-2023-53661
    Upstream
  • CVE-2023-53696
    Upstream
  • CVE-2023-53698
    Upstream
  • CVE-2023-53705
    Upstream
  • CVE-2023-53722
    Upstream
  • CVE-2023-53746
    Upstream
  • CVE-2023-53761
    Upstream
  • CVE-2023-53798
    Upstream
  • CVE-2023-53821
    Upstream
  • CVE-2023-53843
    Upstream
  • CVE-2023-53848
    Upstream
  • CVE-2023-53867
    Upstream
  • CVE-2023-53995
    Upstream
  • CVE-2023-53996
    Upstream
  • CVE-2023-53999
    Upstream
  • CVE-2023-54003
    Upstream
  • CVE-2023-54004
    Upstream
  • CVE-2023-54010
    Upstream
  • CVE-2023-54014
    Upstream
  • CVE-2023-54057
    Upstream
  • CVE-2023-54064
    Upstream
  • CVE-2023-54070
    Upstream
  • CVE-2023-54072
    Upstream
  • CVE-2023-54090
    Upstream
  • CVE-2023-54096
    Upstream
  • CVE-2023-54100
    Upstream
  • CVE-2023-54106
    Upstream
  • CVE-2023-54148
    Upstream
  • CVE-2023-54166
    Upstream
  • CVE-2023-54169
    Upstream
  • CVE-2023-54179
    Upstream
  • CVE-2023-54184
    Upstream
  • CVE-2023-54186
    Upstream
  • CVE-2023-54201
    Upstream
  • CVE-2023-54244
    Upstream
  • CVE-2023-54274
    Upstream
  • CVE-2023-54289
    Upstream
  • CVE-2023-54320
    Upstream
  • CVE-2023-54324
    Upstream
  • CVE-2023-6121
    Upstream
  • CVE-2023-6176
    Upstream
  • CVE-2023-6622
    Upstream
  • CVE-2023-6915
    Upstream
  • CVE-2023-6932
    Upstream
  • CVE-2024-0841
    Upstream
  • CVE-2024-25742
    Upstream
  • CVE-2024-25743
    Upstream
  • CVE-2024-26602
    Upstream
  • CVE-2024-26609
    Upstream
  • CVE-2024-26671
    Upstream
  • CVE-2024-26830
    Upstream
  • CVE-2022-50346
    Upstream
  • CVE-2023-52924
    Upstream
  • EUVD-2019-5061
    Upstream
  • EUVD-2019-6493
    Upstream
  • EUVD-2020-18320
    Upstream
  • EUVD-2021-27028
    Upstream
  • EUVD-2021-34062
    Upstream
  • EUVD-2022-15637
    Upstream
  • EUVD-2022-28310
    Upstream
  • EUVD-2022-42929
    Upstream
  • EUVD-2022-48777
    Upstream
  • EUVD-2022-53826
    Upstream
  • EUVD-2022-54535
    Upstream
  • EUVD-2022-55123
    Upstream
  • EUVD-2022-55164
    Upstream
  • EUVD-2022-55188
    Upstream
  • EUVD-2022-55382
    Upstream
  • EUVD-2022-55392
    Upstream
  • EUVD-2022-55418
    Upstream
  • EUVD-2022-55528
    Upstream
  • EUVD-2022-55569
    Upstream
  • EUVD-2022-55581
    Upstream
  • EUVD-2022-55616
    Upstream
  • EUVD-2022-55618
    Upstream
  • EUVD-2022-55718
    Upstream
  • EUVD-2022-55721
    Upstream
  • EUVD-2022-55737
    Upstream
  • EUVD-2022-55759
    Upstream
  • EUVD-2022-55772
    Upstream
  • EUVD-2022-55779
    Upstream
  • EUVD-2023-23760
    Upstream
  • EUVD-2023-28087
    Upstream
  • EUVD-2023-29672
    Upstream
  • EUVD-2023-32142
    Upstream
  • EUVD-2023-35412
    Upstream
  • EUVD-2023-41353
    Upstream
  • EUVD-2023-42226
    Upstream
  • EUVD-2023-42924
    Upstream
  • EUVD-2023-42927
    Upstream
  • EUVD-2023-42928
    Upstream
  • EUVD-2023-42929
    Upstream
  • EUVD-2023-42932
    Upstream
  • EUVD-2023-44218
    Upstream
  • EUVD-2023-47186
    Upstream
  • EUVD-2023-47187
    Upstream
  • EUVD-2023-50129
    Upstream
  • EUVD-2023-54015
    Upstream
  • EUVD-2023-54115
    Upstream
  • EUVD-2023-56465
    Upstream
  • EUVD-2023-56466
    Upstream
  • EUVD-2023-56997
    Upstream
  • EUVD-2023-57059
    Upstream
  • EUVD-2023-57073
    Upstream
  • EUVD-2023-57114
    Upstream
  • EUVD-2023-57198
    Upstream
  • EUVD-2023-57204
    Upstream
  • EUVD-2023-57205
    Upstream
  • EUVD-2023-57221
    Upstream
  • EUVD-2023-57244
    Upstream
  • EUVD-2023-58376
    Upstream
  • EUVD-2023-58426
    Upstream
  • EUVD-2023-58845
    Upstream
  • EUVD-2023-59114
    Upstream
  • EUVD-2023-59130
    Upstream
  • EUVD-2023-59440
    Upstream
  • EUVD-2023-59747
    Upstream
  • EUVD-2023-59794
    Upstream
  • EUVD-2023-59816
    Upstream
  • EUVD-2023-59817
    Upstream
  • EUVD-2023-59819
    Upstream
  • EUVD-2023-59860
    Upstream
  • EUVD-2023-59873
    Upstream
  • EUVD-2023-59878
    Upstream
  • EUVD-2023-59881
    Upstream
  • EUVD-2023-59909
    Upstream
  • EUVD-2023-59914
    Upstream
  • EUVD-2023-59923
    Upstream
  • EUVD-2023-59939
    Upstream
  • EUVD-2023-59961
    Upstream
  • EUVD-2023-59972
    Upstream
  • EUVD-2023-59983
    Upstream
  • EUVD-2023-59991
    Upstream
  • EUVD-2023-60006
    Upstream
  • EUVD-2023-60023
    Upstream
  • EUVD-2023-60030
    Upstream
  • EUVD-2023-60032
    Upstream
  • EUVD-2023-60067
    Upstream
  • EUVD-2023-60082
    Upstream
  • EUVD-2023-60108
    Upstream
  • EUVD-2023-60148
    Upstream
  • EUVD-2023-60153
    Upstream
  • EUVD-2023-60175
    Upstream
  • EUVD-2023-60254
    Upstream
  • EUVD-2023-60256
    Upstream
  • EUVD-2023-60262
    Upstream
  • EUVD-2023-60269
    Upstream
  • EUVD-2023-60297
    Upstream
  • EUVD-2023-60339
    Upstream
  • EUVD-2023-60345
    Upstream
  • EUVD-2023-60349
    Upstream
  • EUVD-2023-60355
    Upstream
  • EUVD-2023-60397
    Upstream
  • EUVD-2023-60440
    Upstream
  • EUVD-2023-60455
    Upstream
  • EUVD-2023-60457
    Upstream
  • EUVD-2023-60462
    Upstream
  • EUVD-2023-60472
    Upstream
  • EUVD-2023-60475
    Upstream
  • EUVD-2023-60480
    Upstream
  • EUVD-2023-60484
    Upstream
  • EUVD-2023-60515
    Upstream
  • EUVD-2023-60530
    Upstream
  • EUVD-2024-16624
    Upstream
  • EUVD-2024-23050
    Upstream
  • EUVD-2024-23051
    Upstream
  • EUVD-2024-23864
    Upstream
  • EUVD-2024-23933
    Upstream
  • EUVD-2024-24092
    Upstream
  • EUVD-2025-12883
    Upstream
  • EUVD-2025-13117
    Upstream
  • EUVD-2025-13122
    Upstream
  • EUVD-2025-13159
    Upstream
  • EUVD-2025-13160
    Upstream
  • EUVD-2025-13172
    Upstream
  • EUVD-2025-13191
    Upstream
  • EUVD-2025-13196
    Upstream
  • EUVD-2025-205116
    Upstream
  • EUVD-2025-205141
    Upstream
  • EUVD-2025-205145
    Upstream
  • EUVD-2025-205146
    Upstream
  • EUVD-2025-205152
    Upstream
  • EUVD-2025-205158
    Upstream
  • EUVD-2025-205164
    Upstream
  • EUVD-2025-205174
    Upstream
  • EUVD-2025-29867
    Upstream
  • EUVD-2025-29871
    Upstream
  • EUVD-2025-29943
    Upstream
  • EUVD-2025-29947
    Upstream
  • EUVD-2025-29978
    Upstream
  • EUVD-2025-31948
    Upstream
  • EUVD-2025-31972
    Upstream
  • EUVD-2025-31977
    Upstream
  • EUVD-2025-32001
    Upstream
  • EUVD-2025-32018
    Upstream
  • EUVD-2025-32273
    Upstream
  • EUVD-2025-32280
    Upstream
  • EUVD-2025-32289
    Upstream
  • EUVD-2025-32294
    Upstream
  • EUVD-2025-32309
    Upstream
  • EUVD-2025-32313
    Upstream
  • EUVD-2025-32314
    Upstream
  • EUVD-2025-32317
    Upstream
  • EUVD-2025-32344
    Upstream
  • EUVD-2025-32374
    Upstream
  • EUVD-2025-32749
    Upstream
  • EUVD-2025-32753
    Upstream
  • EUVD-2025-32760
    Upstream
  • EUVD-2025-32764
    Upstream
  • EUVD-2025-32777
    Upstream
  • EUVD-2025-32781
    Upstream
  • EUVD-2025-32794
    Upstream
  • EUVD-2025-32864
    Upstream

Browse More

High severity
Scan your project

Continuously monitor your dependencies and get alerted when vulnerabilities like this one affect your stack.

Checkout DevGuard