Red Hat Security AdvisoryRHSA-2025:12746
kernel security update
Released 2025-08-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.32.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.32.1.el9_6, kernel-64k-devel-5.14.0-570.32.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.32.1.el9_6, kernel-64k-5.14.0-570.32.1.el9_6, kernel-64k-core-5.14.0-570.32.1.el9_6 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.32.1.el9_6, libperf-5.14.0-570.32.1.el9_6
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.32.1.el9_6, kernel-rt-64k-5.14.0-570.32.1.el9_6, kernel-rt-64k-core-5.14.0-570.32.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.32.1.el9_6, kernel-rt-core-5.14.0-570.32.1.el9_6, kernel-rt-debug-5.14.0-570.32.1.el9_6 +11
Fixes 10 records
Priority MEDIUM 41
In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Syzbot reported a slab-use-after-free with the following call trace: ==================…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00553 · Published 2025-06-18 · Partial fix · 5.10.238, 5.15.185 +5 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00235 · Published 2025-04-01 · Partial fix · 5.4.291, 5.10.235 +6 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: padata: avoid UAF for reorder_work Although the previous patch can avoid ps and ps UAF for _do_serial, it can not avoid potential UAF issue for reorder_…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00236 · Published 2025-02-27 · Partial fix · 5.5, 5.6 +7 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report [1], we have a UAF case when an hfsc class…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00222 · Published 2025-05-16 · Partial fix · 5.4.294, 5.10.238 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove This fixes the following crash: ===============================================…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00214 · Published 2025-04-16 · Partial fix · 5.4.292, 5.10.236 +7 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() During the `rmmod` operation for the `intel_ishtp_hid` driver, a use-after-free is…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00207 · Published 2025-04-01 · Partial fix · 6.12.19, 6.13.7 +1 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: BUG: KASAN: slab-use-after-free in padata_find_next+0x29/0x1a0 Read of size 4 at ad…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00222 · Published 2025-02-27 · Partial fix · 5.10.235, 5.15.179 +5 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in taprio_dev_notifier Since taprio’s taprio_dev_notifier() isn’t protected by an RCU read-side critical section, a race w…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00178 · Published 2025-06-30 · Fixed in 6.6.95, 6.12.35 +2 CWE-416
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper li…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00207 · Published 2025-04-01 · Fixed in 5.15.180, 6.1.132 +4 CWE-190
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() `struct vmci_event_qp` allocated by qp_notify_peer() contains padding, which may carry…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2025-05-01 · Partial fix · 4.9.334, 4.14.300 +6 CWE-908
THREATIST.IORead the docs