Red Hat Security AdvisoryRHSA-2025:12238
kernel security update
Released 2025-07-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.165.1.el8_4, kernel-4.18.0-305.165.1.el8_4, kernel-abi-stablelists-4.18.0-305.165.1.el8_4 +14
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bpftool-4.18.0-305.165.1.el8_4, kernel-4.18.0-305.165.1.el8_4, kernel-abi-stablelists-4.18.0-305.165.1.el8_4 +14
Fixes 5 records
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning: arch/x86/crypto/poly1305_glue.c:198 poly1305_update_arch() error: __memcp…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00874 · Published 2025-02-26 · Partial fix · 4.9.311, 4.14.276 +6 CWE-120
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00363 · Published 2025-04-03 · Partial fix · 5.4.292, 5.10.236 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00216 · Published 2025-05-01 · Partial fix · 5.4.293, 5.10.237 +7 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: drivers:md:fix a potential use-after-free bug In line 2884, "raid5_release_stripe(sh);" drops the reference to sh and may cause sh to be released.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00258 · Published 2025-06-18 · Partial fix · 4.9.326, 4.14.291 +6 CWE-416
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: limit printed string from FW file There's no guarantee here that the file is always with a NUL-termination, so reading the string may rea…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0024 · Published 2025-04-01 · Partial fix · 5.4.291, 5.10.235 +6 CWE-125