Red Hat Security AdvisoryRHSA-2025:13781
kernel security update
Released 2025-08-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.130.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.130.1.el9_2, kernel-64k-devel-5.14.0-284.130.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.130.1.el9_2, kernel-5.14.0-284.130.1.el9_2, kernel-64k-5.14.0-284.130.1.el9_2 +29
Fixes 9 records
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00235 · Published 2025-04-01 · Partial fix · 5.4.291, 5.10.235 +6 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00257 · Published 2025-02-27 · Partial fix · 5.4.291, 5.10.235 +6 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: selinux: Add boundary check in put_entry() Just like next_entry(), boundary check is necessary to prevent memory out-of-bound access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00265 · Published 2025-06-18 · Partial fix · 4.14.291, 4.19.256 +6 CWE-125
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2025-05-02 · Partial fix · 5.4.293, 5.10.237 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove This fixes the following crash: ===============================================…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00214 · Published 2025-04-16 · Partial fix · 5.4.292, 5.10.236 +7 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes Currently, load_microcode_amd() iterates over all NUMA nodes, retrieves their C…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2025-04-02 · Partial fix · 5.4.292, 5.10.236 +9 CWE-129
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: BUG: KASAN: slab-use-after-free in padata_find_next+0x29/0x1a0 Read of size 4 at ad…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00222 · Published 2025-02-27 · Partial fix · 5.10.235, 5.15.179 +5 CWE-416
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access during mii_nway_restart In mii_nway_restart() the code attempts to call mii->mdio_read which is ch9200_mdio_read()…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00206 · Published 2025-06-28 · Partial fix · 5.4.295, 5.10.239 +6 CWE-908
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() `struct vmci_event_qp` allocated by qp_notify_peer() contains padding, which may carry…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2025-05-01 · Partial fix · 4.9.334, 4.14.300 +6 CWE-908