RHSA-2023:0858: Important: kpatch-patch security update
This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.Security Fix(es): kernel: memory corruption in AX88179178A based USB ethernet device. (CVE-2022-2964) kernel: use-after-free caused by l2capreassemblesdu() in net/bluetooth/l2capcore.c (CVE-2022-3564) kernel: stack overflow in doprocdointvec and procskipspaces (CVE-2022-4378) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:0858?
The severity of RHSA-2023:0858 is categorized as critical due to potential memory corruption vulnerabilities.
How do I fix RHSA-2023:0858?
To fix RHSA-2023:0858, update the affected kpatch-patch package to the recommended version provided by Red Hat.
What vulnerabilities are addressed in RHSA-2023:0858?
RHSA-2023:0858 addresses vulnerabilities including memory corruption in AX88179_178A based USB ethernet devices as well as use-after-free issues.
Which software versions are affected by RHSA-2023:0858?
The affected software versions for RHSA-2023:0858 include multiple versions of the kpatch-patch package as specified by Red Hat.
Is a reboot required after applying RHSA-2023:0858?
A reboot may be required after applying the updates for RHSA-2023:0858 to ensure that all changes take effect properly.