Search: CVE-2024-36971

Red Hat has released a security advisory for kernel live patch modules kpatch-patch-4_18_0-372_87_1 and kpatch-patch-4_18_0-372_91_1 targeting kernel version 4.18.0-372.87.1.el8_6. The update addresses three vulnerabilities: a use-after-free (UAF) in network route management (CVE-2024-36971) and two denial of service issues related to virtio-net tap and tun interfaces with mlx5_core short frames (CVE-2024-41090 and CVE-2024-41091). These vulnerabilities affect Red Hat Enterprise Linux 8.6 versions prior to 8.6.372.91. The advisory rates the impact as Important (high severity) and provides updated patch packages to remediate these issues.