Red Hat Security Advisory

RHSA-2025:13590

kernel-rt security update

Released 2025-08-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.69.1.rt7.410.el8_10, kernel-rt-core-4.18.0-553.69.1.rt7.410.el8_10, kernel-rt-debug-4.18.0-553.69.1.rt7.410.el8_10 +9
Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.69.1.rt7.410.el8_10, kernel-rt-core-4.18.0-553.69.1.rt7.410.el8_10, kernel-rt-debug-4.18.0-553.69.1.rt7.410.el8_10 +7

Fixes 5 records

TI-2025-15711 CVE-2025-21759 · GHSA-pvj3-f5v8-hgxh

ipv6: mcast: extend RCU protection in igmp6_send()

MEDIUM 47

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() igmp6_send() can be called without RTNL or RCU being held.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.07804 Published 2025-02-27 Partial fix · 5.10.271, 5.15.222 +5 CWE-416

TI-2021-22304 CVE-2021-47670 · GHSA-g3pp-67rc-cjg2

can: peak_usb: fix use after free bugs

LOW 39

In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix use after free bugs After calling peak_usb_netif_rx_ni(skb), dereferencing skb is unsafe.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00224 Published 2025-04-17 Fixed in 4.19.171, 5.4.93 +2 CWE-416

TI-2025-15682 CVE-2025-21727 · GHSA-wvmf-xh97-gmfr

padata: fix UAF in padata_reorder

LOW 35

In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: BUG: KASAN: slab-use-after-free in padata_find_next+0x29/0x1a0 Read of size 4 at ad…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00222 Published 2025-02-27 Partial fix · 5.10.235, 5.15.179 +5 CWE-416

TI-2025-25426 CVE-2025-38085 · GHSA-5q6f-wm2q-mpgg

mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race

LOW 33

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table that may have previously been shared across pro…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0016 Published 2025-06-28 Partial fix · 5.10.239, 5.15.186 +5 CWE-362

TI-2025-25500 CVE-2025-38159 · GHSA-92p5-rr34-c98q

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

LOW 30

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_c…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00187 Published 2025-07-03 Partial fix · 5.15.186, 6.1.142 +4 CWE-125