Red Hat Security AdvisoryRHSA-2025:11428
kernel security update
Released 2025-07-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-55.22.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.22.1.el10_0, kernel-64k-devel-6.12.0-55.22.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-55.22.1.el10_0, kernel-64k-6.12.0-55.22.1.el10_0, kernel-64k-core-6.12.0-55.22.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-55.22.1.el10_0, libperf-6.12.0-55.22.1.el10_0
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-55.22.1.el10_0, kernel-rt-64k-6.12.0-55.22.1.el10_0, kernel-rt-64k-core-6.12.0-55.22.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-55.22.1.el10_0, kernel-rt-core-6.12.0-55.22.1.el10_0, kernel-rt-debug-6.12.0-55.22.1.el10_0 +11
Fixes 6 records
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported a remotely-triggerable crash if the client sends a kernel RPC…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0056 · Published 2025-06-30 · Partial fix · 6.4, 6.6.95 +3 CWE-476
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00257 · Published 2025-02-27 · Partial fix · 5.4.291, 5.10.235 +6 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2025-02-27 · Partial fix · 5.4.291, 5.10.235 +6 CWE-415
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: check msg length in SMBUS block read For SMBUS block read, do not continue to read if the message length passed from the device is '0' or gr…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00201 · Published 2025-07-25 · Partial fix · 6.1.142, 6.6.95 +3
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: limit printed string from FW file There's no guarantee here that the file is always with a NUL-termination, so reading the string may rea…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0024 · Published 2025-04-01 · Partial fix · 5.4.291, 5.10.235 +6 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix dereferencing invalid pmd migration entry When migrating a THP, concurrent access to the PMD migration entry during a deferred split…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00228 · Published 2025-05-20 · Partial fix · 5.4.295, 5.10.239 +6 CWE-476
THREATIST.IORead the docs