Red Hat Security Advisory: kpatch-patch-5_14_0-284_48_1 security update
Affects Red Hat kpatch-patch-5_14_0-284_48_1Source GCVE Database
Not known to be exploited.
Data as of 5 Nov 2026, 15:32 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
Exploitation evidence
Disclosed: evidence found.
CVE published 15 Jul 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.
What to do
AI-suggested
Red Hat has released an official live patch module (kpatch-patch-5_14_0-284_48_1) that addresses this vulnerability. Users of Red Hat Enterprise Linux 9.2 Extended Update Support should apply this live patch promptly using the kpatch utility. Detailed instructions for applying the update are available in the Red Hat advisory. No additional mitigation steps are indicated beyond applying the provided patch.
Description
A use-after-free vulnerability (CVE-2024-36886) exists in the TIPC message reassembly code of the Linux kernel, which could allow remote code execution. This issue affects Red Hat Enterprise Linux 9.2 Extended Update Support kernels. A live patch module (kpatch-patch-5_14_0-284_48_1) has been released to address this vulnerability. The patch can be applied via the kpatch utility to modify the running kernel without rebooting.