Red Hat Security AdvisoryRHSA-2025:11861
kernel security update
Released 2025-07-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.30.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.30.1.el9_6, kernel-64k-devel-5.14.0-570.30.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.30.1.el9_6, kernel-64k-5.14.0-570.30.1.el9_6, kernel-64k-core-5.14.0-570.30.1.el9_6 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.30.1.el9_6, libperf-5.14.0-570.30.1.el9_6
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.30.1.el9_6, kernel-rt-64k-5.14.0-570.30.1.el9_6, kernel-rt-64k-core-5.14.0-570.30.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.30.1.el9_6, kernel-rt-core-5.14.0-570.30.1.el9_6, kernel-rt-debug-5.14.0-570.30.1.el9_6 +11
Fixes 10 records
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() There's issue as follows: BUG: KASAN: use-after-free in ext4_xattr_inode_dec_ref_all+0x6ff…
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00217 · Published 2025-04-16 · Partial fix · 5.10.248, 5.15.198 +5 CWE-125
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to ne…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2025-07-03 · Partial fix · 6.6.94, 6.12.34 +2 CWE-125
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2025-05-02 · Partial fix · 5.4.293, 5.10.237 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use-after-free when rename device name Syzbot reported a slab-use-after-free with the following call trace: =============================…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00205 · Published 2025-04-16 · Partial fix · 6.12.23, 6.13.11 +2 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2025-02-27 · Partial fix · 5.4.291, 5.10.235 +6 CWE-415
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: limit printed string from FW file There's no guarantee here that the file is always with a NUL-termination, so reading the string may rea…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0024 · Published 2025-04-01 · Partial fix · 5.4.291, 5.10.235 +6 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access during mii_nway_restart In mii_nway_restart() the code attempts to call mii->mdio_read which is ch9200_mdio_read()…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00206 · Published 2025-06-28 · Partial fix · 5.4.295, 5.10.239 +6 CWE-908
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix dereferencing invalid pmd migration entry When migrating a THP, concurrent access to the PMD migration entry during a deferred split…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00228 · Published 2025-05-20 · Partial fix · 5.4.295, 5.10.239 +6 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid journaling sb update on error if journal is destroying Presently we always BUG_ON if trying to start a transaction on a journal marked with…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00254 · Published 2025-04-16 · Partial fix · 6.6.160, 6.12.46 +2
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix page_size variable overflow Change all variables storing mlx5_umem_mkc_find_best_pgsz() result to unsigned long to support values larger…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00203 · Published 2025-04-16 · Fixed in 6.12.23, 6.13.11 +2 CWE-190
THREATIST.IORead the docs