Red Hat Security AdvisoryRHSA-2025:10379
kernel security update
Released 2025-07-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.25.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.25.1.el9_6, kernel-64k-devel-5.14.0-570.25.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.25.1.el9_6, kernel-64k-5.14.0-570.25.1.el9_6, kernel-64k-core-5.14.0-570.25.1.el9_6 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.25.1.el9_6, libperf-5.14.0-570.25.1.el9_6
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.25.1.el9_6, kernel-rt-64k-5.14.0-570.25.1.el9_6, kernel-rt-64k-core-5.14.0-570.25.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.25.1.el9_6, kernel-rt-core-5.14.0-570.25.1.el9_6, kernel-rt-debug-5.14.0-570.25.1.el9_6 +11
Fixes 5 records
Priority MEDIUM 47
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() igmp6_send() can be called without RTNL or RCU being held.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.07804 · Published 2025-02-27 · Partial fix · 5.10.271, 5.15.222 +5 CWE-416
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00363 · Published 2025-04-03 · Partial fix · 5.4.292, 5.10.236 +6 CWE-416
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp vmxnet3 driver's XDP handling is buggy for packet sizes using ring0 (that is, packet sizes b…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00367 · Published 2025-05-03 · Fixed in 6.6.89, 6.8 +4
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() Syzbot reported a slab-out-of-bounds Write bug: loop0: detected capacity change from 0 to 20…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00244 · Published 2025-05-01 · Partial fix · 4.9.334, 4.14.300 +6 CWE-787
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The issue was caused by dput(upper) being called before ovl_dentry_update_reval(…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00223 · Published 2025-03-27 · Partial fix · 5.10.247, 5.15.179 +7 CWE-416
THREATIST.IORead the docs