High RHSA-2024:1377 3 CVEs

Red Hat Security Advisory: kpatch-patch security update

Published Sep 13, 2024 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 12

Release	Package	Fixed in
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos	kpatch-patch-4_18_0-305_103_1	0:1-4.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos	kpatch-patch-4_18_0-305_103_1-debuginfo	0:1-4.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos	kpatch-patch-4_18_0-305_103_1-debugsource	0:1-4.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos	kpatch-patch-4_18_0-305_108_1	0:1-3.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos	kpatch-patch-4_18_0-305_108_1-debuginfo	0:1-3.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos	kpatch-patch-4_18_0-305_108_1-debugsource	0:1-3.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos	kpatch-patch-4_18_0-305_114_1	0:1-2.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos	kpatch-patch-4_18_0-305_114_1-debuginfo	0:1-2.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos	kpatch-patch-4_18_0-305_114_1-debugsource	0:1-2.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos	kpatch-patch-4_18_0-305_120_1	0:1-1.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos	kpatch-patch-4_18_0-305_120_1-debuginfo	0:1-1.el8_4
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::baseos	kpatch-patch-4_18_0-305_120_1-debugsource	0:1-1.el8_4

Vulnerabilities 3

High 7.8

CVE-2023-31436

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax ca…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Apr 28, 2023
High 7.8

CVE-2023-3611

Out-of-bounds write in Linux kernel's net/sched: sch_qfq component

An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated accordin…

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Jul 21, 2023
High 7.0

CVE-2024-0646

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privile…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Jan 17, 2024

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2192671
report
https://bugzilla.redhat.com/show_bug.cgi?id=2225191
report
https://bugzilla.redhat.com/show_bug.cgi?id=2253908
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1377.json
report
https://access.redhat.com/security/cve/CVE-2023-3611
advisory
https://www.cve.org/CVERecord?id=CVE-2023-3611
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-3611
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e337087c3b5805fe0b8a46ba622a962880b5d64
report
https://access.redhat.com/security/cve/CVE-2023-31436
advisory
https://www.cve.org/CVERecord?id=CVE-2023-31436
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-31436
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3037933448f60f9acb705997eae62013ecb81e0d
report
https://access.redhat.com/security/cve/CVE-2024-0646
advisory
https://www.cve.org/CVERecord?id=CVE-2024-0646
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-0646
article
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5a595000e267