Red Hat Security Advisory

RHSA-2025:10005

kernel security update

Released 2025-07-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.161.1.el8_4, kernel-4.18.0-305.161.1.el8_4, kernel-abi-stablelists-4.18.0-305.161.1.el8_4 +14

Fixes 3 records

TI-2022-24629 CVE-2022-49114 · GHSA-6f5q-x637-6prf

scsi: libfc: Fix use after free in fc_exch_abts_resp()

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will decrease the ep's reference count.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00357 Published 2025-02-26 Partial fix · 4.9.311, 4.14.276 +7 CWE-416

TI-2022-24626 CVE-2022-49111 · GHSA-5wpf-jxv5-j2rg

Bluetooth: Fix use after free in hci_send_acl

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hci_send_acl This fixes the following trace caused by receiving HCI_EV_DISCONN_PHY_LINK_COMPLETE which does call hci_co…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00344 Published 2025-02-26 Partial fix · 4.9.311, 4.14.276 +7 CWE-416

TI-2022-24637 CVE-2022-49122 · GHSA-qrrx-c987-2pv5

dm ioctl: prevent potential spectre v1 gadget

LOW 25

In the Linux kernel, the following vulnerability has been resolved: dm ioctl: prevent potential spectre v1 gadget It appears like cmd could be a Spectre v1 gadget as it's supplied by a user and used as an array index.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00307 Published 2025-02-26 Partial fix · 4.9.311, 4.14.276 +7