RHSA-2024:5582HighCVSS 7.8

Red Hat Security Advisory: kpatch-patch-4_18_0-372_87_1 and kpatch-patch-4_18_0-372_91_1 security update

Published
August 19, 2024
Last Modified
November 6, 2026

🔗 CVE IDs covered (3)

CVE-2024-36971 →CVE-2024-41090 →CVE-2024-41091 →

📋 Description

CVE-2024-36971 — kernel: net: kernel: UAF in network route management CVE-2024-41090 — kernel: virtio-net: tap: mlx5_core short frame denial of service CVE-2024-41091 — kernel: virtio-net: tun: mlx5_core short frame denial of service

🎯 Affected products15

  • Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_87_1-0:1-5.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_87_1-0:1-5.el8_6.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_87_1-0:1-5.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_87_1-debuginfo-0:1-5.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_87_1-debuginfo-0:1-5.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_87_1-debugsource-0:1-5.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_87_1-debugsource-0:1-5.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_91_1-0:1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_91_1-0:1-4.el8_6.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_91_1-0:1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_91_1-debuginfo-0:1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_91_1-debuginfo-0:1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_91_1-debugsource-0:1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • kpatch-patch-4_18_0-372_91_1-debugsource-0:1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (6)