RHSA-2024:0376: Important: kpatch-patch security update
Important: kpatch-patch security update
Other sources
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.Security Fix(es): kernel: use after free in unixstreamsendpage (CVE-2023-4622) kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753) kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe (CVE-2023-2163) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:0376?
The severity of RHSA-2024:0376 is classified as Important due to a use after free vulnerability in the kernel.
How do I fix RHSA-2024:0376?
To fix RHSA-2024:0376, you should update to kpatch-patch version 4_18_0-193_109_1-1-4.el8_2 or newer.
What vulnerabilities are addressed in RHSA-2024:0376?
RHSA-2024:0376 addresses a use after free vulnerability identified by CVE-2023-4622.
Which systems are affected by RHSA-2024:0376?
Systems running affected versions of the kpatch-patch package on Red Hat Enterprise Linux 8.2 are impacted by RHSA-2024:0376.
Is there an operational impact from RHSA-2024:0376?
Yes, the vulnerability could potentially allow an attacker to execute arbitrary code, affecting system stability and security.