Skip to content
OpenAdvisories
High RHSA-2024:1960 2 CVEs

Red Hat Security Advisory: kpatch-patch security update

Published Sep 13, 2024 · Updated Aug 26, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::server kpatch-patch-3_10_0-1160_102_1 0:1-4.el7
Red Hat · RHEL 7 enterprise_linux:7::server kpatch-patch-3_10_0-1160_102_1-debuginfo 0:1-4.el7
Red Hat · RHEL 7 enterprise_linux:7::server kpatch-patch-3_10_0-1160_105_1 0:1-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server kpatch-patch-3_10_0-1160_105_1-debuginfo 0:1-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server kpatch-patch-3_10_0-1160_108_1 0:1-2.el7
Red Hat · RHEL 7 enterprise_linux:7::server kpatch-patch-3_10_0-1160_108_1-debuginfo 0:1-2.el7

Vulnerabilities 2

  • High 7.8
    CVE-2023-4622 Public exploit

    Use-after-free in Linux kernel's af_unix component

    A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-4623

    Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component

    A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2237757
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2237760
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1960.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-4622
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-4622
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-4622
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.1.y&id=790c2f9d15b594350ae9bca7b236f2b1859de02c
  • report
    https://access.redhat.com/security/cve/CVE-2023-4623
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-4623
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-4623
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b3d26c5702c7d6c45456326e56d2ccf3f103e60f