This Red Hat security advisory (RHSA-2024:7489) addresses four vulnerabilities in the Linux kernel networking stack for Red Hat Enterprise Linux 9.2 Extended Update Support. CVE-2024-27415 fixes an issue in netfilter bridge where multicast packets are now confirmed before being passed up the stack. CVE-2024-36979 resolves a VLAN use-after-free vulnerability in bridge MST. CVE-2024-38558 corrects an overwriting of the connection tracking original tuple for ICMPv6 packets in openvswitch. CVE-2024-36270 ensures that netfilter tproxy bails out if IP has been disabled on the device. The advisory rates the update as moderate severity and requires a system reboot after patching. No known exploits in the wild have been reported. The update is available for multiple Red Hat Enterprise Linux 9.2 variants and related products.

The vulnerabilities affect the Linux kernel's networking components, potentially allowing improper handling of network packets, use-after-free conditions, and incorrect connection tracking. These issues could lead to system instability or unintended behavior in network packet processing. The advisory rates the impact as moderate. There are no reports of active exploitation in the wild at this time.

Red Hat has released an official security update for Red Hat Enterprise Linux 9.2 Extended Update Support that addresses these vulnerabilities. Users should apply the kernel update as provided in advisory RHSA-2024:7489 and reboot their systems to ensure the fixes take effect. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigations are specified or required beyond applying the official patch and rebooting.