Lucene search

K
redhatRedHatRHSA-2024:0876
HistoryFeb 20, 2024 - 4:44 a.m.

(RHSA-2024:0876) Important: kpatch-patch security update

2024-02-2004:44:23
access.redhat.com
11
kpatch-patch security update
kernel live patch module
uaf
use-after-free
igb driver
ktls
cve-2023-4623
cve-2023-4921
cve-2023-45871
cve-2024-0646
buffer size
net scheduler
readonly memory pages
security fix.

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.9%

This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.

Security Fix(es):

  • kernel: net/sched: sch_hfsc UAF (CVE-2023-4623)

  • kernel: use-after-free in sch_qfq network scheduler (CVE-2023-4921)

  • kernel: IGB driver inadequate buffer size for frames larger than MTU (CVE-2023-45871)

  • kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination (CVE-2024-0646)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.