Back to guides list

[Important] [Security] Virtuozzo ReadyKernel Patch 159.0 for Virtuozzo Hybrid Server 7.5

Issue date: 2023-08-21

Applies to: Virtuozzo Hybrid Server 7.5

Virtuozzo Advisory ID: VZA-2023-023

1. Overview

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5.

2. Security Fixes

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Out-of-bound memory access during reading relayfs. (CVE-2023-3268)

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] A use-after-free in the Linux console driver. (CVE-2023-3567)

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Out-of-bound memory write in the network packet scheduler. (CVE-2023-35788)

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Invalid memory write in the network packet scheduler. (CVE-2023-3611)

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] A NULL pointer dereference in IPSec configuration. (CVE-2023-3772)

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] A use-after-free in the network packet scheduler. (CVE-2023-3776)

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] A reference counter leak in an error path for the network packet scheduler. (CVE-2023-3609)

3. Installing the Update

Download, install, and immediately apply the patch to the current kernel by running readykernel update.

Dec 12, 2024
Edit Print