Loading story…
Red Hat released RHSA-2024:8157 for Red Hat Enterprise Linux 9.2 kernel update channels, delivering kernel version 5.14.0-284.88.1.el9_2 and remediating 11 CVEs across x86_64, aarch64, ppc64le, and s390x offerings. The update includes a fix for CVE-2024-36244 in the taprio network scheduler, extending its minimum interval restriction to the entire scheduling cycle, alongside fixes for kernel NULL-pointer dereferences, deadlocks, memory leaks, and other subsystem defects. Systems must be rebooted after installation for the updated kernel to take effect.
The related kernel flaws include CVE-2024-41066, in which inconsistent ibmvnic transmit bookkeeping can overwrite a non-null socket-buffer pointer and leak memory, potentially stopping TCP congestion control and causing ETIMEDOUT denial-of-service conditions. Red Hat rated that issue Low (CVSS 4.4) because exploitation requires high local privileges and affected IBM virtual-network hardware; organizations unable to patch can disable or blacklist the ibmvnic module. Red Hat also documented CVE-2024-42284, a Moderate (CVSS 7.3) TIPC buffer overflow triggered by invalid UDP media-address handling; affected deployments should apply available RHEL 8/9 kernel fixes and review exposure where TIPC is enabled.
See real exploitation activity before you spend the cycle.
7 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2024:9546 to fix CVE-2024-41066 in the RHEL 9.4 Extended Update Support kernel. The flaw could leak socket buffers when ibmvnic transmit bookkeeping arrays became unsynchronized.
Red Hat issued RHSA-2024:8856 for RHEL 8 kernel packages and RHSA-2024:8870 for RHEL 8 kernel-rt packages. The advisories fixed CVE-2024-41066 in the ibmvnic transmit path and CVE-2024-42284 in TIPC networking code.
Red Hat issued RHSA-2024:8158 for RHEL 9.2 Extended Update Support kernel-rt packages and RHSA-2024:8162 for RHEL 9 kernel packages, addressing CVE-2024-42284.
Red Hat issued the Moderate-severity RHSA-2024:8157 advisory for RHEL 9.2 update channels, delivering kernel version 5.14.0-284.88.1.el9_2. It remediated 11 CVEs, including CVE-2024-36244, CVE-2024-41066, and CVE-2024-42284; affected systems require rebooting after installation.
Red Hat issued RHSA-2024:8107 to provide a kernel fix for CVE-2024-42284 in Red Hat Enterprise Linux 8.8 Extended Update Support.
Red Hat published its record for CVE-2024-42284, a TIPC networking flaw where tipc_udp_addr2str() can return zero for an invalid UDP media address and enable a buffer overflow in tipc_media_addr_printf().
An upstream Linux kernel CVE advisory was published for CVE-2024-36244, involving insufficient enforcement of the minimum interval restriction in the taprio network scheduler across an entire scheduling cycle.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
5 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourceredhat.com
Open sourceredhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released moderate-severity advisory **RHSA-2025:8796** for supported RHEL 9.4 update channels, delivering kernel version `5.14.0-427.72.1.el9_4`. The update applies across x86_64, aarch64, ppc64le, and s390x deployments in EUS, AUS, SAP, extended-life-cycle, and CodeReady Linux Builder repositories. Administrators must reboot affected systems after installing the updated kernel. The advisory remediates kernel issues including `CVE-2024-26921`, which could release an IPv4 defragmentation socket while still in use; `CVE-2024-26645`, a tracing-map insertion race condition that can cause local denial of service; `CVE-2024-27042`, a potential out-of-bounds access in AMDGPU discovery-register initialization; `CVE-2024-35930`, a possible LPFC SCSI-driver memory leak; and `CVE-2024-36933`, an NSH GSO packet-header handling flaw. It also addresses a PowerPC vector-operation issue and references `CVE-2023-54114`; RHEL 9 kernel-rt remains listed as affected by `CVE-2024-26645` without a corresponding erratum.
Aug 26, 2026
Red Hat released Linux kernel security updates for supported **RHEL 8 and RHEL 9** streams, addressing dozens of flaws across networking, virtualization, storage, graphics, Bluetooth, filesystems, and device drivers. The updates include **CVE-2024-36886**, a TIPC message-reassembly use-after-free issue that could permit remote code execution on affected RHEL 8.6 systems, as well as memory-corruption, information-disclosure, race-condition, denial-of-service, and NULL-pointer defects. RHEL 9.2 updates delivered kernel `5.14.0-284.75.1.el9_2`, while RHEL 8.8 and 8.6 updates provided `4.18.0-477.64.1.el8_8` and `4.18.0-372.111.1.el8_6`, respectively; Real Time kernel users received `5.14.0-284.75.1.rt14.360.el9_2`. The fixes cover, among other issues, **CVE-2024-35791**, a KVM SVM use-after-free in `svm_register_enc_region()`, **CVE-2024-36952**, a race condition in the SCSI `lpfc` driver's NPIV cleanup sequence, and **CVE-2024-27417**, an IPv6 reference leak in `inet6_rtm_getaddr()`. Red Hat shipped remediation through RHSA-2024:4823, RHSA-2024:4831, RHSA-2024:4740, RHSA-2024:4447, RHSA-2024:0113, and RHSA-2024:6567 for affected x86_64, ARM64, IBM Z, and Power offerings, including EUS, SAP, and extended-lifecycle channels. Organizations should apply the applicable kernel packages and **reboot systems** to activate the fixes.
Aug 26, 2026
Red Hat released Important-rated RHEL 9 kernel and real-time kernel updates that remediate a broad set of Linux kernel vulnerabilities across networking, traffic control, XFRM, IPv6, USB, Wi-Fi, memory management, and virtualization components. The updates include `kernel-rt-5.14.0-284.11.1.rt14.296.el9_2` for x86_64 and corresponding standard kernel packages for x86_64, s390x, ppc64le, and aarch64 RHEL 9 deployments, including EUS, ELS, SAP, AUS, and CodeReady variants. Notable fixes include races and memory-safety flaws tracked as `CVE-2022-3028`, `CVE-2022-3567`, `CVE-2022-3522`, `CVE-2022-4129`, `CVE-2022-43750`, `CVE-2022-47929`, `CVE-2023-0394`, and `CVE-2023-0590`. Impacts range from local denial of service and kernel-information disclosure to potential privilege escalation; `CVE-2022-3628` can be triggered through a malicious USB device against the `brcmfmac` Wi-Fi driver. Organizations should apply the applicable supported RHEL kernel errata, reboot systems to activate the new kernel, and, where patching `CVE-2022-3628` is not immediately possible, prevent loading the `brcmfmac` module.
Aug 26, 2026