Skip to content
OpenAdvisories
High RHSA-2023:3517 1 CVE

Red Hat Security Advisory: kpatch-patch security update

Published Sep 13, 2024 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_71_1 0:1-5.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_71_1-debuginfo 0:1-5.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_71_1-debugsource 0:1-5.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_72_1 0:1-4.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_72_1-debuginfo 0:1-4.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_72_1-debugsource 0:1-4.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_76_1 0:1-3.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_76_1-debuginfo 0:1-3.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_76_1-debugsource 0:1-3.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_82_1 0:1-2.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_82_1-debuginfo 0:1-2.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_82_1-debugsource 0:1-2.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_86_2 0:1-1.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_86_2-debuginfo 0:1-1.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_86_2-debugsource 0:1-1.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_88_1 0:1-1.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_88_1-debuginfo 0:1-1.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos kpatch-patch-4_18_0-305_88_1-debugsource 0:1-1.el8_4

Vulnerabilities 1

  • High 8.0
    CVE-2022-42896 Public exploit

    Info Leak in l2cap_core in the Linux Kernel

    There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker coul…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2147364
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3517.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-42896
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-42896
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-42896
  • article
    https://github.com/google/security-research/security/advisories/GHSA-pf87-6c9q-jvm4