[Important] [Security] Virtuozzo ReadyKernel Patch 163.1 for Virtuozzo Server 7.5

Issue date: 2023-11-07

Applies to: Virtuozzo Server 7.5

Virtuozzo Advisory ID: VZA-2023-036

1. Overview

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Server 7.5.

[Important] [3.10.0-1160.53.1.vz7.185.3 to 3.10.0-1160.90.1.vz7.200.7] Null pointer dereference in Unix local sockets during sendfile(). (CVE-2023-4622)
[Important] [3.10.0-1160.53.1.vz7.185.3 to 3.10.0-1160.90.1.vz7.200.7] Invalid memory access in the HFSC packet scheduler. (CVE-2023-4623)
[Important] [3.10.0-1160.53.1.vz7.185.3 to 3.10.0-1160.90.1.vz7.200.7] Use-after-free if modifying and deleting an anonymous set in the same nftables transaction. (CVE-2023-32233)

Download, install, and immediately apply the patch to the current kernel by running readykernel update.

The new and updated packages are listed in the JSON file.