Red Hat Live Patches Remediate nftables and Network Kernel Flaws
Patch & Detection Intelligence · 24 sources · Updated 3mo ago · First seen Sep 12, 2023
Red Hat released Important kpatch-patch live-kernel updates for RHEL 7, 8, and 9 to remediate multiple Linux kernel vulnerabilities in nftables/nf_tables, netfilter, IPvlan, and traffic-control components. The addressed defects include use-after-free, out-of-bounds read/write, and reference-counter leak conditions; affected CVEs include CVE-2023-31248, CVE-2023-32233, CVE-2023-35001, CVE-2023-3609, CVE-2023-3090, CVE-2023-4004, and CVE-2023-4128.
CVE-2023-31248 is a high-severity use-after-free in nft_chain_lookup_byid() caused by failing to verify that an nftables chain is active. An attacker with CAP_NET_ADMIN in a user or network namespace could use the flaw for local privilege escalation. The live-patch packages apply changes to running kernels after installation, avoiding a conventional reboot, and cover supported x86_64 and IBM Power little-endian deployments across applicable EUS, ELS, AUS, TUS, and SAP service variants.
