RHSA-2025:0067HighCVSS 5.9
Red Hat Security Advisory: kpatch-patch-4_18_0-372_118_1, kpatch-patch-4_18_0-372_131_1, and kpatch-patch-4_18_0-372_91_1 security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2024-53122 — kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
🎯 Affected products22
- Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_118_1-0:1-3.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_118_1-0:1-3.el8_6.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_118_1-0:1-3.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_118_1-debuginfo-0:1-3.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_118_1-debuginfo-0:1-3.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_118_1-debugsource-0:1-3.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_118_1-debugsource-0:1-3.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_131_1-0:1-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_131_1-0:1-2.el8_6.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_131_1-0:1-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_131_1-debuginfo-0:1-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_131_1-debuginfo-0:1-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_131_1-debugsource-0:1-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_131_1-debugsource-0:1-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_91_1-0:1-7.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_91_1-0:1-7.el8_6.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_91_1-0:1-7.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_91_1-debuginfo-0:1-7.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_91_1-debuginfo-0:1-7.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_91_1-debugsource-0:1-7.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
- kpatch-patch-4_18_0-372_91_1-debugsource-0:1-7.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: If enabled, you may disable MPTCP support. For more information please read https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/getting-started-with-multipath-tcp_configuring-and-managing-networking#preparing-rhel-to-enable-mptcp-support_getting-started-with-multipath-tcp