Red Hat Security Advisory

RHSA-2025:10211

kernel security update

Released 2025-07-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.100.1.el8_8, kernel-4.18.0-477.100.1.el8_8, kernel-abi-stablelists-4.18.0-477.100.1.el8_8 +14
Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.100.1.el8_8, kernel-4.18.0-477.100.1.el8_8, kernel-abi-stablelists-4.18.0-477.100.1.el8_8 +14

Fixes 3 records

TI-2022-24626 CVE-2022-49111 · GHSA-5wpf-jxv5-j2rg

Bluetooth: Fix use after free in hci_send_acl

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hci_send_acl This fixes the following trace caused by receiving HCI_EV_DISCONN_PHY_LINK_COMPLETE which does call hci_co…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00344 Published 2025-02-26 Partial fix · 4.9.311, 4.14.276 +7 CWE-416

TI-2025-15716 CVE-2025-21764 · GHSA-j8mq-pfgm-36r2

ndisc: use RCU protection in ndisc_alloc_skb()

LOW 36

In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00271 Published 2025-02-27 Partial fix · 5.4.291, 5.10.235 +6 CWE-416

TI-2022-24904 CVE-2022-49395 · GHSA-pxwr-cc58-gq3m

um: Fix out-of-bounds read in LDT setup

LOW 31

In the Linux kernel, the following vulnerability has been resolved: um: Fix out-of-bounds read in LDT setup syscall_stub_data() expects the data_count parameter to be the number of longs, not bytes.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00288 Published 2025-02-26 Partial fix · 4.9.318, 4.14.283 +7 CWE-125