RHSA-2024:1253: Important: kernel live patch module security update
Important: kernel live patch module security update
Other sources
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.Security Fix(es): kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe (CVE-2023-2163) kernel: UAF in nftables when nftsetlookupglobal triggered after handling named and anonymous sets in batch requests (CVE-2023-3390) kernel: net/sched: clsu32 component reference counter leak if tcfchangeindev() fails (CVE-2023-3609) kernel: use after free in unixstreamsendpage (CVE-2023-4622) kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination (CVE-2024-0646) kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1253?
The severity of RHSA-2024:1253 is classified as Important.
How do I fix RHSA-2024:1253?
To fix RHSA-2024:1253, you should update the kpatch-patch package to the latest provided version.
Which software is affected by RHSA-2024:1253?
RHSA-2024:1253 affects the kpatch-patch package on specific versions listed in the advisory.
What is the purpose of the update in RHSA-2024:1253?
The update in RHSA-2024:1253 addresses security vulnerabilities related to the kernel live patch module.
When was RHSA-2024:1253 released?
RHSA-2024:1253 was released to address security concerns in the kernel live patch module.