Red Hat Security Advisory: kpatch-patch security update
Affects Red HatSource GCVE Database
Not known to be exploited · fixed in 9.9 : patch Red Hat soon.
Data as of 25 Oct 2026, 19:02 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 1.3% chance of exploitation in 30 days – higher than 70% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 9.9, 9.7, 9.5
Exploitation evidence
Disclosed: evidence found.
CVE published 23 Jul 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-25.
What to do
Upgrade redhat/kpatch-patch to 9.9, 9.7 or 9.5.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Red Hatredhat/kpatch-patchpkg:rpm/redhat/kpatch-patchOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Red Hat has released an official security update for the kpatch-patch module addressing CVE-2024-36886. Users should apply the update as described in Red Hat advisory RHSA-2024:4713 and reboot their systems to ensure the patch takes effect. No additional mitigation steps are indicated beyond applying the official update and rebooting.
Description
A use-after-free vulnerability (CVE-2024-36886) exists in the TIPC message reassembly code of the Linux kernel, which is addressed by a kpatch live patch module update for Red Hat Enterprise Linux 9. This vulnerability could allow remote code execution. Red Hat has released an important security update for the kpatch-patch module to fix this issue. The update requires a system reboot to take effect. The affected products include multiple variants and update streams of Red Hat Enterprise Linux 9 for x86_64 and ppc64le architectures.