Back to guides list

[Important] [Security] Virtuozzo ReadyKernel Patch 168.1 for Virtuozzo Hybrid Server 7.5

Issue date: 2024-06-24

Applies to: Virtuozzo Hybrid Server 7.5

Virtuozzo Advisory ID: VZA-2024-023

1. Overview

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5.

2. Security Fixes

  • [Important] [3.10.0-1160.80.1.vz7.191.4 to 3.10.0-1160.105.1.vz7.214.3] netfilter: A use-after-free vulnerability in ‘mtype_destroy().’ (PSBM-156977)

  • [Important] [3.10.0-1160.80.1.vz7.191.4 to 3.10.0-1160.105.1.vz7.214.3] netfilter: ipset: Potential kernel crash or memory corruption. (PSBM-156979)

  • [Important] [3.10.0-1160.80.1.vz7.191.4 to 3.10.0-1160.90.1.vz7.200.7 ] Reverting the CVE-2023-42753 patch could lead to potential out-of-bound access. (RK-484)

3. Installing the Update

Download, install, and immediately apply the patch to the current kernel by running readykernel update.

Nov 18, 2024
Edit Print