Red Hat Security Advisory: kpatch-patch-5_14_0-284_52_1 and kpatch-patch-5_14_0-284_79_1 security update
Red Hat has released a security update for the kpatch live kernel patch module targeting kernel version 5.14.0-284.52.1.el9_2. The update addresses two denial of service vulnerabilities (CVE-2024-41090 and CVE-2024-41091) related to the virtio-net tap and tun drivers interacting with mlx5_core. These vulnerabilities could allow an attacker to cause a denial of service via short frame handling. The update requires a system reboot to take effect and is rated with an Important security impact by Red Hat.
AI Analysis
Technical Summary
This security advisory from Red Hat addresses two denial of service vulnerabilities in the virtio-net tap and tun drivers involving mlx5_core, identified as CVE-2024-41090 and CVE-2024-41091. The vulnerabilities are fixed via live kernel patch modules (kpatch-patch-5_14_0-284_52_1 and kpatch-patch-5_14_0-284_79_1) for Red Hat Enterprise Linux 9.2 Extended Update Support. The kpatch modules allow modification of running kernel code without reboot, but a reboot is required for the update to fully apply. The advisory rates the security impact as Important and references Red Hat's official update article for application instructions.
Potential Impact
Successful exploitation of these vulnerabilities could result in a denial of service condition affecting the kernel's virtio-net tap and tun drivers when using mlx5_core. This could disrupt network functionality on affected systems running the specified kernel version. There are no known exploits in the wild at this time.
Mitigation Recommendations
A security update is available from Red Hat for the kpatch live kernel patch modules addressing these vulnerabilities. Systems running Red Hat Enterprise Linux 9.2 Extended Update Support with kernel version 5.14.0-284.52.1.el9_2 should apply the kpatch-patch-5_14_0-284_52_1 or kpatch-patch-5_14_0-284_79_1 update as provided by Red Hat. A system reboot is required for the update to take effect. Refer to Red Hat's official advisory and update instructions at https://access.redhat.com/articles/11258 for detailed remediation steps.
Red Hat Security Advisory: kpatch-patch-5_14_0-284_52_1 and kpatch-patch-5_14_0-284_79_1 security update
Description
Red Hat has released a security update for the kpatch live kernel patch module targeting kernel version 5.14.0-284.52.1.el9_2. The update addresses two denial of service vulnerabilities (CVE-2024-41090 and CVE-2024-41091) related to the virtio-net tap and tun drivers interacting with mlx5_core. These vulnerabilities could allow an attacker to cause a denial of service via short frame handling. The update requires a system reboot to take effect and is rated with an Important security impact by Red Hat.
Affected software
pkg:rpm/redhat/kpatch-patch-5_14_0-284_52_1pkg:rpm/redhat/kpatch-patch-5_14_0-284_79_1Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This security advisory from Red Hat addresses two denial of service vulnerabilities in the virtio-net tap and tun drivers involving mlx5_core, identified as CVE-2024-41090 and CVE-2024-41091. The vulnerabilities are fixed via live kernel patch modules (kpatch-patch-5_14_0-284_52_1 and kpatch-patch-5_14_0-284_79_1) for Red Hat Enterprise Linux 9.2 Extended Update Support. The kpatch modules allow modification of running kernel code without reboot, but a reboot is required for the update to fully apply. The advisory rates the security impact as Important and references Red Hat's official update article for application instructions.
Potential Impact
Successful exploitation of these vulnerabilities could result in a denial of service condition affecting the kernel's virtio-net tap and tun drivers when using mlx5_core. This could disrupt network functionality on affected systems running the specified kernel version. There are no known exploits in the wild at this time.
Mitigation Recommendations
A security update is available from Red Hat for the kpatch live kernel patch modules addressing these vulnerabilities. Systems running Red Hat Enterprise Linux 9.2 Extended Update Support with kernel version 5.14.0-284.52.1.el9_2 should apply the kpatch-patch-5_14_0-284_52_1 or kpatch-patch-5_14_0-284_79_1 update as provided by Red Hat. A system reboot is required for the update to take effect. Refer to Red Hat's official advisory and update instructions at https://access.redhat.com/articles/11258 for detailed remediation steps.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:6313
- Cve Count
- 2
- Additional Cves
- ["CVE-2024-41091"]
- Cvss Version
- null
Threat ID: 6a419cbd27e9c79719abfbcc
Added to database: 06/28/2026, 22:14:21 UTC
Last enriched: 06/28/2026, 22:38:01 UTC
Last updated: 07/02/2026, 10:51:10 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.