The advisory covers a kernel live patch module (kpatch-patch-4_18_0-477_43_1) that fixes two use-after-free vulnerabilities in the Linux kernel: CVE-2024-36886 affecting TIPC message reassembly and CVE-2024-36971 affecting network route management. These vulnerabilities could lead to remote code execution. The patch is targeted specifically at kernel version 4.18.0-477.43.1.el8_8 and is distributed as a kpatch live patch module for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat has rated the update as Important and provides official fixes via this kpatch module.

The vulnerabilities are use-after-free bugs in kernel components that could be exploited to achieve remote code execution. This poses a significant security risk as it may allow attackers to execute arbitrary code with kernel privileges. The advisory rates the impact as Important (high severity). There are no known exploits in the wild at the time of publication.

Red Hat has released an official kpatch live patch module (kpatch-patch-4_18_0-477_43_1) that fixes these vulnerabilities for Red Hat Enterprise Linux 8.8 Extended Update Support. Users should apply this update promptly to remediate the issues. For detailed instructions on applying the update, refer to Red Hat's official guidance at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.