The security advisory covers kernel live patch modules kpatch-patch-4_18_0-477_43_1 and kpatch-patch-4_18_0-477_67_1 for Red Hat Enterprise Linux 8.8 Extended Update Support. These patches fix two denial of service vulnerabilities identified as CVE-2024-41090 and CVE-2024-41091, which affect the virtio-net tap and tun interfaces in the mlx5_core driver. The patches modify the running kernel code via the kpatch utility to address the short frame denial of service issues. Red Hat classifies the update as Important and requires a reboot to apply the changes.

Successful exploitation of these vulnerabilities could cause a denial of service condition in the affected kernel network interfaces, potentially disrupting network functionality on affected systems. The advisory does not report known exploits in the wild. The impact is rated as Important by Red Hat, indicating a significant but not critical risk.

Red Hat has released updated kpatch modules (kpatch-patch-4_18_0-477_43_1 and kpatch-patch-4_18_0-477_67_1) that address these vulnerabilities. Users should apply these updates as soon as possible and reboot the system to ensure the patches take effect. For detailed update instructions, refer to Red Hat's official guidance at https://access.redhat.com/articles/11258. No alternative mitigations are indicated.