[Important] [Security] Virtuozzo ReadyKernel Patch 169.0 for Virtuozzo Server 7.5

Issue date: 2024-08-19

Applies to: Virtuozzo Server 7.5

Virtuozzo Advisory ID: VZA-2024-037

1. Overview

The cumulative Virtuozzo ReadyKernel patch was updated with a security fix. The patch applies to all supported kernels of Virtuozzo Server 7.5. NOTE: The kernel 3.10.0-1160.80.1.vz7.191.4 has reached the end of its support period. No more ReadyKernel updates are planned for this kernel.

2. Security Fixes

• [Important] [3.10.0-1160.90.1.vz7.200.7 to 3.10.0-1160.105.1.vz7.214.3] A use-after-free vulnerability in network route management. (CVE-2024-36971)

3. Installing the Update

Download, install, and immediately apply the patch to the current kernel by running readykernel update.

4. References

• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-200.7-169.0-1.vl7/
• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-214.3-169.0-1.vl7/

The new and updated packages are listed in the JSON file.