Read the docs
Red Hat Security Advisory

RHSA-2025:10179

kernel security update

Released 2025-07-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 5 records

TI-2022-24838 CVE-2022-49328 · GHSA-v93h-9m65-mhx5

mt76: fix use-after-free by removing a non-RCU wcid pointer

Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASAN about use-after-free in mt76_txq_schedule by protecting mtxq-…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00422 Published 2025-02-26 Partial fix · 5.15.58, 5.17.14 +2 CWE-416
TI-2022-24629 CVE-2022-49114 · GHSA-6f5q-x637-6prf

scsi: libfc: Fix use after free in fc_exch_abts_resp()

Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will decrease the ep's reference count.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00357 Published 2025-02-26 Partial fix · 4.9.311, 4.14.276 +7 CWE-416
TI-2022-24626 CVE-2022-49111 · GHSA-5wpf-jxv5-j2rg

Bluetooth: Fix use after free in hci_send_acl

Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hci_send_acl This fixes the following trace caused by receiving HCI_EV_DISCONN_PHY_LINK_COMPLETE which does call hci_co…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00344 Published 2025-02-26 Partial fix · 4.9.311, 4.14.276 +7 CWE-416
TI-2022-24904 CVE-2022-49395 · GHSA-pxwr-cc58-gq3m

um: Fix out-of-bounds read in LDT setup

Priority LOW 31

In the Linux kernel, the following vulnerability has been resolved: um: Fix out-of-bounds read in LDT setup syscall_stub_data() expects the data_count parameter to be the number of longs, not bytes.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00288 Published 2025-02-26 Partial fix · 4.9.318, 4.14.283 +7 CWE-125
TI-2022-24637 CVE-2022-49122 · GHSA-qrrx-c987-2pv5

dm ioctl: prevent potential spectre v1 gadget

Priority LOW 25

In the Linux kernel, the following vulnerability has been resolved: dm ioctl: prevent potential spectre v1 gadget It appears like cmd could be a Spectre v1 gadget as it's supplied by a user and used as an array index.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00307 Published 2025-02-26 Partial fix · 4.9.311, 4.14.276 +7