RHSA-2024:4970HighCVSS 7.0

Red Hat Security Advisory: kpatch-patch-4_18_0-305_120_1 security update

Published
August 1, 2024
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2023-6546 →

📋 Description

CVE-2023-6546 — kernel: GSM multiplexing race condition leads to privilege escalation

🎯 Affected products8

  • Red Hat Enterprise Linux BaseOS E4S (v.8.4)
  • kpatch-patch-4_18_0-305_120_1-0:1-3.el8_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)
  • kpatch-patch-4_18_0-305_120_1-0:1-3.el8_4.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)
  • kpatch-patch-4_18_0-305_120_1-0:1-3.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)
  • kpatch-patch-4_18_0-305_120_1-debuginfo-0:1-3.el8_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)
  • kpatch-patch-4_18_0-305_120_1-debuginfo-0:1-3.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)
  • kpatch-patch-4_18_0-305_120_1-debugsource-0:1-3.el8_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)
  • kpatch-patch-4_18_0-305_120_1-debugsource-0:1-3.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: This flaw can be mitigated by preventing the affected `n_gsm` kernel module from being loaded. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278.

🔗 References (4)