[RHSA-2024:0089] kpatch-patch security update

Severity Important

Affected Packages 8

CVEs 2

This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.

Security Fix(es):

kernel: use after free in unix_stream_sendpage (CVE-2023-4622)
kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Package	Affected Version
pkg:rpm/redhat/kpatch-patch-4_18_0-513_9_1?arch=x86_64&distro=redhat-8.9	< 1-1.el8_9
pkg:rpm/redhat/kpatch-patch-4_18_0-513_9_1?arch=ppc64le&distro=redhat-8.9	< 1-1.el8_9
pkg:rpm/redhat/kpatch-patch-4_18_0-513_5_1?arch=x86_64&distro=redhat-8.9	< 1-2.el8_9
pkg:rpm/redhat/kpatch-patch-4_18_0-513_5_1?arch=ppc64le&distro=redhat-8.9	< 1-2.el8_9
pkg:rpm/redhat/kernel?arch=x86_64&distro=redhat-8.9	< 4.18.0-513.5.1.el8_9
pkg:rpm/redhat/kernel?arch=x86_64&distro=redhat-8.9	< 4.18.0-513.9.1.el8_9
pkg:rpm/redhat/kernel?arch=ppc64le&distro=redhat-8.9	< 4.18.0-513.5.1.el8_9
pkg:rpm/redhat/kernel?arch=ppc64le&distro=redhat-8.9	< 4.18.0-513.9.1.el8_9

ID

RHSA-2024:0089

Severity

important

URL

https://access.redhat.com/errata/RHSA-2024:0089

Published

2024-01-09T00:00:00
(8 months ago)

Modified

2024-01-09T00:00:00
(8 months ago)

Rights

Other Advisories

Source	# ID	URL
Bugzilla	2237760	https://bugzilla.redhat.com/2237760
Bugzilla	2239843	https://bugzilla.redhat.com/2239843
RHSA	RHSA-2024:0089	https://access.redhat.com/errata/RHSA-2024:0089
CVE	CVE-2023-42753	https://access.redhat.com/security/cve/CVE-2023-42753
CVE	CVE-2023-4622	https://access.redhat.com/security/cve/CVE-2023-4622

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch
Affected	pkg:rpm/redhat/kpatch-patch-4_18_0-513_9_1?arch=x86_64&distro=redhat-8.9	redhat	kpatch-patch-4_18_0-513_9_1	< 1-1.el8_9	redhat-8.9	x86_64
Affected	pkg:rpm/redhat/kpatch-patch-4_18_0-513_9_1?arch=ppc64le&distro=redhat-8.9	redhat	kpatch-patch-4_18_0-513_9_1	< 1-1.el8_9	redhat-8.9	ppc64le
Affected	pkg:rpm/redhat/kpatch-patch-4_18_0-513_5_1?arch=x86_64&distro=redhat-8.9	redhat	kpatch-patch-4_18_0-513_5_1	< 1-2.el8_9	redhat-8.9	x86_64
Affected	pkg:rpm/redhat/kpatch-patch-4_18_0-513_5_1?arch=ppc64le&distro=redhat-8.9	redhat	kpatch-patch-4_18_0-513_5_1	< 1-2.el8_9	redhat-8.9	ppc64le
Affected	pkg:rpm/redhat/kernel?arch=x86_64&distro=redhat-8.9	redhat	kernel	< 4.18.0-513.5.1.el8_9	redhat-8.9	x86_64
Affected	pkg:rpm/redhat/kernel?arch=x86_64&distro=redhat-8.9	redhat	kernel	< 4.18.0-513.9.1.el8_9	redhat-8.9	x86_64
Affected	pkg:rpm/redhat/kernel?arch=ppc64le&distro=redhat-8.9	redhat	kernel	< 4.18.0-513.5.1.el8_9	redhat-8.9	ppc64le
Affected	pkg:rpm/redhat/kernel?arch=ppc64le&distro=redhat-8.9	redhat	kernel	< 4.18.0-513.9.1.el8_9	redhat-8.9	ppc64le

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date