Linux · Security advisory · August 20, 2024

RHSA-2024:5522: kpatch-patch-4_18_0-553 security update

RHSA-2024:5522, released August 20, 2024, fixes 2 CVEs in kpatch-patch-4_18_0-553 (version 0:1-1.el8_10). One of them is being exploited (CVE-2024-36971); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
2
None rated Critical
Exploited
1
CVE-2024-36971
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0270
86th percentile

Priority of the 2 CVEs

Patch now 1 Urgent 0 High 1 Routine 0

Fixed package versions

ProductReleaseFixed in
kpatch-patch-4_18_0-553RHEL 80:1-1.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2024-36971 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0270 KEVExploited
High CVE-2024-36886 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0131 None reported
Showing 1 to 2 of 2 1