Skip to main content
CVE-2024-36886VulnerabilityPublished Updated

Red Hat Security Advisory: kpatch-patch-5_14_0-284_48_1 security update

Affects Red Hat kpatch-patch-5_14_0-284_48_1Source GCVE Database

0
Compare

Not known to be exploited.

Data as of 5 Nov 2026, 15:32 UTC

Severity
High

Rated by Threat Radar · No CVSS score from NVD or the CNA

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 15 Jul 2024

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.

What to do

AI-suggested

Red Hat has released an official live patch module (kpatch-patch-5_14_0-284_48_1) that addresses this vulnerability. Users of Red Hat Enterprise Linux 9.2 Extended Update Support should apply this live patch promptly using the kpatch utility. Detailed instructions for applying the update are available in the Red Hat advisory. No additional mitigation steps are indicated beyond applying the provided patch.

Description

A use-after-free vulnerability (CVE-2024-36886) exists in the TIPC message reassembly code of the Linux kernel, which could allow remote code execution. This issue affects Red Hat Enterprise Linux 9.2 Extended Update Support kernels. A live patch module (kpatch-patch-5_14_0-284_48_1) has been released to address this vulnerability. The patch can be applied via the kpatch utility to modify the running kernel without rebooting.

References

Community reviews

Loading reviews…