The vulnerability CVE-2024-36971 is a use-after-free (UAF) issue in the network route management code of the Linux kernel targeted by Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat has released live patch modules (kpatch-patch-5_14_0-284_48_1 and kpatch-patch-5_14_0-284_52_1) to address this issue. These patches can be applied via the kpatch utility to modify the running kernel without requiring a reboot. The advisory classifies the severity as Important and provides updated packages for multiple architectures including x86_64 and ppc64le. No CVSS score is provided in the advisory, but the severity is considered high based on Red Hat's rating.

The vulnerability involves a use-after-free condition in the kernel's network route management, which could potentially lead to system instability or other security issues related to kernel memory corruption. Red Hat rates the security impact as Important, indicating a significant risk if unpatched. There are no known exploits in the wild at the time of the advisory.

Red Hat has released official live patch modules (kpatch-patch-5_14_0-284_48_1 and kpatch-patch-5_14_0-284_52_1) that address this vulnerability for Red Hat Enterprise Linux 9.2 Extended Update Support. Users should apply these patches as per Red Hat's update instructions available at https://access.redhat.com/articles/11258. The patches can be applied live using the kpatch utility without rebooting. No additional mitigation steps are indicated by the vendor advisory.