7.5
9.0 7.5
Docs menu
MENU

[Important] [Security] Virtuozzo ReadyKernel Patch 159.0 for Virtuozzo Server 7.5

Issue date: 2023-08-21

Applies to: Virtuozzo Server 7.5

Virtuozzo Advisory ID: VZA-2023-023

1. Overview

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Server 7.5.

2. Security Fixes

  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Out-of-bound memory access during reading relayfs. (CVE-2023-3268)
  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] A use-after-free in the Linux console driver. (CVE-2023-3567)
  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Out-of-bound memory write in the network packet scheduler. (CVE-2023-35788)
  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Invalid memory write in the network packet scheduler. (CVE-2023-3611)
  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] A NULL pointer dereference in IPSec configuration. (CVE-2023-3772)
  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] A use-after-free in the network packet scheduler. (CVE-2023-3776)
  • [Important] [3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] A reference counter leak in an error path for the network packet scheduler. (CVE-2023-3609)

3. Installing the Update

Download, install, and immediately apply the patch to the current kernel by running readykernel update.

4. References

The new and updated packages are listed in the JSON file.