Threat database

This advisory addresses two use-after-free vulnerabilities in the Linux kernel targeted by the kpatch live patch module for Red Hat Enterprise Linux 8.8. The vulnerabilities include CVE-2024-36886, affecting TIPC message reassembly, and CVE-2024-36971, affecting network route management. These flaws could potentially allow remote code execution or other impacts related to memory corruption. Red Hat has released an important security update patching these issues for kernel version 4.18.0-477.43.1.el8_8. The update is available as a kpatch live patch module, enabling modification of running kernel code without reboot. No known exploits are reported in the wild at this time.