CVE-2024-53104 (Redhat 9.4)

[pkeecom]

What happened: Redhat has issued a new kernel 5.14.0-427.50.2.el9_4 which fixes the CVE

What you expected to happen: Grype should not report the issue as High on the fixed kernel

How to reproduce it (as minimally and precisely as possible): Install Kernel [kernel-headers-5.14.0-427.50.2.el9_4.x86_64.rpm]

Anything else we need to know?:
kernel 5.14.0-427.50.2.el9_4 0:5.14.0-503.23.2.el9_5 rpm CVE-2024-53104 High
kernel-core 5.14.0-427.50.2.el9_4 0:5.14.0-503.23.2.el9_5 rpm CVE-2024-53104 High
kernel-modules 5.14.0-427.50.2.el9_4 0:5.14.0-503.23.2.el9_5 rpm CVE-2024-53104 High
kernel-modules-core 5.14.0-427.50.2.el9_4 0:5.14.0-503.23.2.el9_5 rpm CVE-2024-53104 High
kernel-tools 5.14.0-427.50.2.el9_4 0:5.14.0-503.23.2.el9_5 rpm CVE-2024-53104 High
kernel-tools-libs 5.14.0-427.50.2.el9_4 0:5.14.0-503.23.2.el9_5 rpm CVE-2024-53104 High
kernel-uki-virt 5.14.0-427.50.2.el9_4 0:5.14.0-503.23.2.el9_5 rpm CVE-2024-53104 High
python3-perf 5.14.0-427.50.2.el9_4 0:5.14.0-503.23.2.el9_5 rpm CVE-2024-53104 High
High or Critical vulnerabilities exist in grype report!

Environment:

• Output of grype version: Latest Available
• OS (e.g: cat /etc/os-release or similar): RHEL 9.4

[pkeecom]

The package was delivered vis Redhat extended update support EUS.