Threats Tagged 'cve-2024-36971'

This advisory addresses two use-after-free vulnerabilities in the Linux kernel targeted by a kpatch live patch module for Red Hat Enterprise Linux 8.8 Extended Update Support. The vulnerabilities include CVE-2024-36886 affecting TIPC message reassembly and CVE-2024-36971 in network route management. These flaws could lead to remote code execution. Red Hat has released a security update (kpatch-patch-4_18_0-477_43_1) to remediate these issues.

A use-after-free (UAF) vulnerability exists in the network route management component of the Linux kernel version 5.14.0-284.48.1.el9_2, addressed by Red Hat via live patch modules kpatch-patch-5_14_0-284_48_1 and kpatch-patch-5_14_0-284_52_1. This vulnerability is tracked as CVE-2024-36971 and affects Red Hat Enterprise Linux 9.2 Extended Update Support and related variants. The issue is resolved by applying the provided kpatch live patch modules, which modify the running kernel to fix the flaw without requiring a reboot. Red Hat rates this update as having an important security impact. No known exploits are reported in the wild at this time.

A security update for the kpatch-patch-4_18_0-553 live kernel patch module for Red Hat Enterprise Linux 8 addresses two use-after-free vulnerabilities in the kernel. These include a remote code execution vulnerability in TIPC message reassembly (CVE-2024-36886) and a use-after-free in network route management (CVE-2024-36971). The update is rated as Important by Red Hat Product Security and targets kernel version 4.18.0-553.el8_10. The patch modifies the running kernel code via the kpatch utility to fix these issues.

This advisory addresses security vulnerabilities in the Red Hat Enterprise Linux 8.6 kernel live patch modules kpatch-patch-4_18_0-372_87_1 and kpatch-patch-4_18_0-372_91_1. The vulnerabilities include a use-after-free (UAF) in network route management (CVE-2024-36971) and denial of service issues related to short frames in virtio-net tap and tun interfaces (CVE-2024-41090 and CVE-2024-41091). These patches modify the running kernel to fix these issues without requiring a reboot. The update is rated as important by Red Hat Product Security. No CVSS scores are provided in the advisory. The vulnerabilities affect Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions and Extended Update Support Extension versions. A security update is available to address these issues.

A security update for the kpatch live kernel patch module targeting Red Hat Enterprise Linux 9.0 addresses multiple vulnerabilities including use-after-free issues and denial of service flaws in kernel components such as TIPC message reassembly, network route management, and virtio-net drivers. The update fixes CVE-2024-36886, CVE-2024-36971, CVE-2024-41090, and CVE-2024-41091. Systems must be rebooted after applying the update for the fixes to take effect.