Red Hat Security AdvisoryRHSA-2025:13120
kernel security update
Released 2025-08-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.166.1.el8_4, kernel-4.18.0-305.166.1.el8_4, kernel-abi-stablelists-4.18.0-305.166.1.el8_4 +14
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bpftool-4.18.0-305.166.1.el8_4, kernel-4.18.0-305.166.1.el8_4, kernel-abi-stablelists-4.18.0-305.166.1.el8_4 +14
Fixes 5 records
Priority MEDIUM 41
In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Syzbot reported a slab-use-after-free with the following call trace: ==================…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00553 · Published 2025-06-18 · Partial fix · 5.10.238, 5.15.185 +5 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00235 · Published 2025-04-01 · Partial fix · 5.4.291, 5.10.235 +6 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00257 · Published 2025-02-27 · Partial fix · 5.4.291, 5.10.235 +6 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2025-02-27 · Partial fix · 5.4.291, 5.10.235 +6 CWE-415
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() `struct vmci_event_qp` allocated by qp_notify_peer() contains padding, which may carry…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2025-05-01 · Partial fix · 4.9.334, 4.14.300 +6 CWE-908