Red Hat Security Advisory: kpatch-patch-5_14_0-427_13_1 security update
Affects Red Hat kpatch-patch-5_14_0-427_13_1Source GCVE Database
Exploited in the wild · KEV due 28 Aug 2024 : apply the vendor's fix or mitigations to Red Hat kpatch-patch-5_14_0-427_13_1 now.
Data as of 5 Nov 2026, 17:32 UTC
Actively exploited
High severity · No CVSS score from NVD or the CNA
- KEV deadline
- US federal agencies must patch by this date; a sensible deadline for everyone else. Other KEV due dates
Exploitation evidence
t = 0 is the CVE’s publication on cve.org
Disclosed: evidence found.
CVE published 19 Aug 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: evidence found.
Listed in CISA KEV 12 days before disclosure
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
Timeline
Added to CISA KEV (opens in a new tab)
exploitation confirmed
, 12 days before disclosure
CVE published
on cve.org
, t = 0
KEV remediation due
US federal deadline
, 9 days after disclosure
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), CISA KEV (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
A use-after-free (UAF) vulnerability exists in the network route management component of the Linux kernel version 5.14.0-427.13.1.el9_4, addressed by a kpatch live patch module from Red Hat. This vulnerability is tracked as CVE-2024-36971 and has been rated as having a high security impact. The vulnerability is known to be exploited in the wild. Red Hat has released an important security update to mitigate this issue for Red Hat Enterprise Linux 9 and its Extended Update Support versions.