Red Hat Security AdvisoryRHSA-2025:11245
kernel security update
Released 2025-07-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.77.1.el9_4, libperf-5.14.0-427.77.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.77.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.77.1.el9_4, kernel-64k-devel-5.14.0-427.77.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.77.1.el9_4, kernel-5.14.0-427.77.1.el9_4, kernel-64k-5.14.0-427.77.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.77.1.el9_4, kernel-rt-core-5.14.0-427.77.1.el9_4, kernel-rt-debug-5.14.0-427.77.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.77.1.el9_4, kernel-rt-core-5.14.0-427.77.1.el9_4, kernel-rt-debug-5.14.0-427.77.1.el9_4 +11
Fixes 7 records
Priority MEDIUM 47
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() igmp6_send() can be called without RTNL or RCU being held.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.07804 · Published 2025-02-27 · Partial fix · 5.10.271, 5.15.222 +5 CWE-416
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00363 · Published 2025-04-03 · Partial fix · 5.4.292, 5.10.236 +6 CWE-416
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() There's issue as follows: BUG: KASAN: use-after-free in ext4_xattr_inode_dec_ref_all+0x6ff…
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00217 · Published 2025-04-16 · Partial fix · 5.10.248, 5.15.198 +5 CWE-125
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to ne…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2025-07-03 · Partial fix · 6.6.94, 6.12.34 +2 CWE-125
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00216 · Published 2025-05-01 · Partial fix · 5.4.293, 5.10.237 +7 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller detected a use-after-free issue in ext4_insert_dentry that was caused by out-of-bounds access due to in…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00232 · Published 2025-05-01 · Partial fix · 5.4.293, 4.5 +13 CWE-193
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattr_ids count A Sysbot [1] corrupted filesystem exposes two flaws in the handling and sanity checking of…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00267 · Published 2025-03-27 · Partial fix · 4.14.306, 4.19.273 +7 CWE-190
THREATIST.IORead the docs