Lucene search

K
redhatRedHatRHSA-2024:1323
HistoryMar 13, 2024 - 10:30 p.m.

(RHSA-2024:1323) Important: kpatch-patch security update

2024-03-1322:30:50
access.redhat.com
12
kernel live patch
network scheduler
igb driver
l2cap_connect
security update
cve-2023-4921
cve-2023-45871
cve-2022-42896
cve-2023-31436
cvss score
references section

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.1%

This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.

Security Fix(es):

  • kernel: use-after-free in sch_qfq network scheduler (CVE-2023-4921)

  • kernel: IGB driver inadequate buffer size for frames larger than MTU (CVE-2023-45871)

  • kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896)

  • kernel: out-of-bounds write in qfq_change_class function (CVE-2023-31436)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.