Read the docs
Red Hat Security Advisory

RHSA-2025:10830

kernel security update

Released 2025-07-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 10 records

Priority MEDIUM 47

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() igmp6_send() can be called without RTNL or RCU being held.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.07804 Published 2025-02-27 Partial fix · 5.10.271, 5.15.222 +5 CWE-416
TI-2025-15954 CVE-2025-22004 · GHSA-fmvx-5hvp-q7fh

net: atm: fix use after free in lec_send()

Priority LOW 39

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00363 Published 2025-04-03 Partial fix · 5.4.292, 5.10.236 +6 CWE-416
Priority LOW 38

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() There's issue as follows: BUG: KASAN: use-after-free in ext4_xattr_inode_dec_ref_all+0x6ff…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00217 Published 2025-04-16 Partial fix · 5.10.248, 5.15.198 +5 CWE-125
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() Syzbot reported a slab-out-of-bounds Write bug: loop0: detected capacity change from 0 to 20…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00244 Published 2025-05-01 Partial fix · 4.9.334, 4.14.300 +6 CWE-787
TI-2025-25092 CVE-2025-37738 · GHSA-jw72-qv66-6947

ext4: ignore xattrs past end

Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00216 Published 2025-05-01 Partial fix · 5.4.293, 5.10.237 +7 CWE-416
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix aq_vec index out of range error The final update statement of the for loop exceeds the array range, the dereference of self->aq_vec[i…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00202 Published 2025-06-18 Partial fix · 5.10.138, 5.15.63 +2 CWE-129
TI-2025-16053 CVE-2025-22104 · GHSA-2q7g-23rp-fjwm

ibmvnic: Use kernel helpers for hex dumps

Priority LOW 31

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using st…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00229 Published 2025-04-16 Partial fix · 6.1.187, 6.6.156 +3 CWE-125
TI-2022-24904 CVE-2022-49395 · GHSA-pxwr-cc58-gq3m

um: Fix out-of-bounds read in LDT setup

Priority LOW 31

In the Linux kernel, the following vulnerability has been resolved: um: Fix out-of-bounds read in LDT setup syscall_stub_data() expects the data_count parameter to be the number of longs, not bytes.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00288 Published 2025-02-26 Partial fix · 4.9.318, 4.14.283 +7 CWE-125
Priority LOW 25

In the Linux kernel, the following vulnerability has been resolved: dm ioctl: prevent potential spectre v1 gadget It appears like cmd could be a Spectre v1 gadget as it's supplied by a user and used as an array index.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00307 Published 2025-02-26 Partial fix · 4.9.311, 4.14.276 +7
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattr_ids count A Sysbot [1] corrupted filesystem exposes two flaws in the handling and sanity checking of…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00267 Published 2025-03-27 Partial fix · 4.14.306, 4.19.273 +7 CWE-190