Lucene search

RedHatRHSA-2024:5858

HistoryAug 26, 2024 - 11:10 a.m.

(RHSA-2024:5858) Important: kpatch-patch-5_14_0-70_85_1 security update

2024-08-2611:10:40

access.redhat.com

kernel live patch

kpatch command line

running kernel

tipc message reassembly

use-after-free

remote code execution

network route management

denial of service

cve page

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

JSON

This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-70.85.1.el9_0.

Security Fix(es):

kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: net: CVE-2024-36971 kernel: UAF in network route management (CVE-2024-36971)
kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090)
kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected configurations

Vulners

Node

redhatkernel-rtRange≤4.18.0-553.16.1.rt7.357.el8_10

redhatkernelRange≤4.18.0-553.16.1.el8_10

redhatkernelRange≤4.18.0-305.141.1.el8_4

redhatkernel-rtRange≤4.18.0-305.141.1.rt7.217.el8_4

redhatkernelRange≤4.18.0-372.111.1.el8_6

redhatkernelRange≤4.18.0-477.67.1.el8_8

redhatkernelRange≤5.14.0-427.26.1.el9_4

redhatkernelRange≤5.14.0-70.112.1.el9_0

redhatkernel-rtRange≤5.14.0-70.112.1.rt21.184.el9_0

redhatkernelRange≤5.14.0-284.73.1.el9_2

redhatkernel-rtRange≤5.14.0-284.73.1.rt14.358.el9_2

redhatkernel-rtRange≤4.18.0-553.22.1.rt7.363.el8_10

redhatkernelRange≤4.18.0-553.22.1.el8_10

redhatkernelRange≤4.18.0-193.141.1.el8_2

redhatkernelRange≤4.18.0-305.139.1.el8_4

redhatkernel-rtRange≤4.18.0-305.139.1.rt7.215.el8_4

redhatkernelRange≤4.18.0-372.118.1.el8_6

redhatkernelRange≤4.18.0-477.70.1.el8_8

redhatkernelRange≤5.14.0-427.33.1.el9_4

redhatkernelRange≤5.14.0-284.80.1.el9_2

redhatkernel-rtRange≤5.14.0-284.80.1.rt14.365.el9_2

redhatkernelRange≤3.10.0-1062.90.1.el7

redhatkernelRange≤3.10.0-1160.123.1.el7

redhatkernelRange≤4.18.0-193.138.1.el8_2

redhatkernelRange≤4.18.0-305.138.1.el8_4

redhatkernel-rtRange≤4.18.0-305.138.1.rt7.214.el8_4

redhatkernelRange≤5.14.0-427.31.1.el9_4

redhatkernelRange≤5.14.0-284.79.1.el9_2

redhatkernel-rtRange≤5.14.0-284.79.1.rt14.364.el9_2

AND

redhatenterprise_linuxMatchnfv

redhatenterprise_linuxMatch8

redhatenterprise_linuxMatch9

VendorProductVersionCPE
redhatkernel-rt*cpe:2.3:o:redhat:kernel-rt:*:*:*:*:*:*:*:*
redhatkernel*cpe:2.3:a:redhat:kernel:*:*:*:*:*:*:*:*
redhatenterprise_linuxnfvcpe:2.3:o:redhat:enterprise_linux:nfv:*:*:*:*:*:*:*
redhatenterprise_linux8cpe:2.3:o:redhat:enterprise_linux:8:*:*:*:*:*:*:*
redhatenterprise_linux9cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	kernel-rt	*	cpe:2.3:o:redhat:kernel-rt::::::::
redhat	kernel	*	cpe:2.3:a:redhat:kernel::::::::
redhat	enterprise_linux	nfv	cpe:2.3:o:redhat:enterprise_linux:nfv:::::::*
redhat	enterprise_linux	8	cpe:2.3:o:redhat:enterprise_linux:8:::::::*
redhat	enterprise_linux	9	cpe:2.3:o:redhat:enterprise_linux:9:::::::*