Red Hat Security Advisory

RHSA-2025:0578

kernel security update

Released 2025-01-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-503.22.1.el9_5, libperf-5.14.0-503.22.1.el9_5
Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-503.22.1.el9_5, kernel-64k-debug-devel-matched-5.14.0-503.22.1.el9_5, kernel-64k-devel-5.14.0-503.22.1.el9_5 +11
Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.4.0-503.22.1.el9_5, kernel-5.14.0-503.22.1.el9_5, kernel-64k-5.14.0-503.22.1.el9_5 +30
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-503.22.1.el9_5, kernel-rt-core-5.14.0-503.22.1.el9_5, kernel-rt-debug-5.14.0-503.22.1.el9_5 +9
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-503.22.1.el9_5, kernel-rt-core-5.14.0-503.22.1.el9_5, kernel-rt-debug-5.14.0-503.22.1.el9_5 +11

Fixes 4 records

TI-2024-33598 CVE-2024-50154 · GHSA-r9cc-7xcq-fpxg

tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().

MEDIUM 44

In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00559 Published 2024-11-07 Partial fix · 4.2, 5.4.293 +6 CWE-416

TI-2024-38175 CVE-2024-57947 · GHSA-2885-grqh-2673

netfilter: nf_set_pipapo: fix initial map fill

MEDIUM 42

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the size of the first field,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00443 Published 2025-01-23 Partial fix · 5.10.247, 5.15.165 +4 CWE-401

TI-2024-35559 CVE-2024-53088 · GHSA-9w8f-6h5p-xj5x

i40e: fix race condition by adding filter's intermediate sync state

LOW 33

In the Linux kernel, the following vulnerability has been resolved: i40e: fix race condition by adding filter's intermediate sync state Fix a race condition in the i40e driver that leads to MAC/VLAN filters becoming corr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00187 Published 2024-11-19 Partial fix · 5.15.172, 6.1.117 +3 CWE-362

TI-2024-33716 CVE-2024-50275 · GHSA-4grr-9vhg-g98w

arm64/sve: Discard stale CPU state when handling SVE traps

LOW 32

In the Linux kernel, the following vulnerability has been resolved: arm64/sve: Discard stale CPU state when handling SVE traps The logic for handling SVE traps manipulates saved FPSIMD/SVE state incorrectly, and a race w…

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.0024 Published 2024-11-19 Fixed in 5.15.174, 6.1.120 +3