Skip to content
OpenAdvisories
Critical RHSA-2024:0376 3 CVEs

Red Hat Security Advisory: kpatch-patch security update

Published Sep 13, 2024 · Updated Aug 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 8.2 E4S rhel_e4s:8.2::baseos kpatch-patch-4_18_0-193_109_1 0:1-4.el8_2
Red Hat · RHEL 8.2 E4S rhel_e4s:8.2::baseos kpatch-patch-4_18_0-193_109_1-debuginfo 0:1-4.el8_2
Red Hat · RHEL 8.2 E4S rhel_e4s:8.2::baseos kpatch-patch-4_18_0-193_109_1-debugsource 0:1-4.el8_2
Red Hat · RHEL 8.2 E4S rhel_e4s:8.2::baseos kpatch-patch-4_18_0-193_113_1 0:1-3.el8_2
Red Hat · RHEL 8.2 E4S rhel_e4s:8.2::baseos kpatch-patch-4_18_0-193_113_1-debuginfo 0:1-3.el8_2
Red Hat · RHEL 8.2 E4S rhel_e4s:8.2::baseos kpatch-patch-4_18_0-193_113_1-debugsource 0:1-3.el8_2
Red Hat · RHEL 8.2 E4S rhel_e4s:8.2::baseos kpatch-patch-4_18_0-193_116_1 0:1-2.el8_2
Red Hat · RHEL 8.2 E4S rhel_e4s:8.2::baseos kpatch-patch-4_18_0-193_116_1-debuginfo 0:1-2.el8_2
Red Hat · RHEL 8.2 E4S rhel_e4s:8.2::baseos kpatch-patch-4_18_0-193_116_1-debugsource 0:1-2.el8_2
Red Hat · RHEL 8.2 E4S rhel_e4s:8.2::baseos kpatch-patch-4_18_0-193_119_1 0:1-1.el8_2
Red Hat · RHEL 8.2 E4S rhel_e4s:8.2::baseos kpatch-patch-4_18_0-193_119_1-debuginfo 0:1-1.el8_2
Red Hat · RHEL 8.2 E4S rhel_e4s:8.2::baseos kpatch-patch-4_18_0-193_119_1-debugsource 0:1-1.el8_2

Vulnerabilities 3

  • Critical 10.0
    CVE-2023-2163 Public exploit

    Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation

    Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-4622 Public exploit

    Use-after-free in Linux kernel's af_unix component

    A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2023-42753

    Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

    An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer o…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2237760
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2239843
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2240249
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0376.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-2163
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-2163
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-2163
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed
  • report
    https://access.redhat.com/security/cve/CVE-2023-4622
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-4622
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-4622
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.1.y&id=790c2f9d15b594350ae9bca7b236f2b1859de02c
  • report
    https://access.redhat.com/security/cve/CVE-2023-42753
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-42753
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-42753
  • article
    https://seclists.org/oss-sec/2023/q3/216