Red Hat Security Advisory

RHSA-2025:11570

kernel security update

Released 2025-07-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.153.1.el8_6, kernel-4.18.0-372.153.1.el8_6, kernel-abi-stablelists-4.18.0-372.153.1.el8_6 +14
Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.153.1.el8_6, kernel-4.18.0-372.153.1.el8_6, kernel-abi-stablelists-4.18.0-372.153.1.el8_6 +19
Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.153.1.el8_6, kernel-4.18.0-372.153.1.el8_6, kernel-abi-stablelists-4.18.0-372.153.1.el8_6 +14

Fixes 3 records

TI-2022-24574 CVE-2022-49058 · GHSA-8x6x-mcww-82p3

cifs: potential buffer overflow in handling symlinks

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning: arch/x86/crypto/poly1305_glue.c:198 poly1305_update_arch() error: __memcp…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00874 Published 2025-02-26 Partial fix · 4.9.311, 4.14.276 +6 CWE-120

TI-2025-15954 CVE-2025-22004 · GHSA-fmvx-5hvp-q7fh

net: atm: fix use after free in lec_send()

LOW 39

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00363 Published 2025-04-03 Partial fix · 5.4.292, 5.10.236 +6 CWE-416

TI-2022-24904 CVE-2022-49395 · GHSA-pxwr-cc58-gq3m

um: Fix out-of-bounds read in LDT setup

LOW 31

In the Linux kernel, the following vulnerability has been resolved: um: Fix out-of-bounds read in LDT setup syscall_stub_data() expects the data_count parameter to be the number of longs, not bytes.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00288 Published 2025-02-26 Partial fix · 4.9.318, 4.14.283 +7 CWE-125