Red Hat Security Advisory

RHSA-2025:13946

kernel security update

Released 2025-08-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.83.1.el9_4, libperf-5.14.0-427.83.1.el9_4
Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.83.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.83.1.el9_4, kernel-64k-devel-5.14.0-427.83.1.el9_4 +11
Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.83.1.el9_4, kernel-5.14.0-427.83.1.el9_4, kernel-64k-5.14.0-427.83.1.el9_4 +29
Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.83.1.el9_4, kernel-rt-core-5.14.0-427.83.1.el9_4, kernel-rt-debug-5.14.0-427.83.1.el9_4 +9
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.83.1.el9_4, kernel-rt-core-5.14.0-427.83.1.el9_4, kernel-rt-debug-5.14.0-427.83.1.el9_4 +11

Fixes 6 records

TI-2025-25148 CVE-2025-37797 · GHSA-hvr4-ppmm-c7fp

net_sched: hfsc: Fix a UAF vulnerability in class handling

LOW 35

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00225 Published 2025-05-02 Partial fix · 5.4.293, 5.10.237 +6 CWE-416

TI-2025-15970 CVE-2025-22020 · GHSA-h2g5-mxp5-qrcx

memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove

LOW 35

In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove This fixes the following crash: ===============================================…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00214 Published 2025-04-16 Partial fix · 5.4.292, 5.10.236 +7 CWE-416

TI-2024-27396 CVE-2024-41035 · GHSA-7v5q-9hp6-p273

USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor

LOW 25

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor Syzbot has identified a bug in usbcore (see the Closes: tag below) cau…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00299 Published 2024-07-29 Partial fix · 3.3, 3.11 +13

TI-2025-25427 CVE-2025-38086 · GHSA-33v2-gr7f-4wmr

net: ch9200: fix uninitialised access during mii_nway_restart

LOW 24

In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access during mii_nway_restart In mii_nway_restart() the code attempts to call mii->mdio_read which is ch9200_mdio_read()…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00206 Published 2025-06-28 Partial fix · 5.4.295, 5.10.239 +6 CWE-908

TI-2025-15976 CVE-2025-22026 · GHSA-xrr8-p4pf-hfwr

nfsd: don't ignore the return code of svc_proc_register()

LOW 24

In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register().

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00206 Published 2025-04-16 Partial fix · 5.10.259, 5.15.210 +7 CWE-252

TI-2024-17749 CVE-2024-26878 · GHSA-jg7c-h6xh-f8hr

quota: Fix potential NULL pointer dereference

LOW 21

In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference Below race may cause NULL pointer dereference P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot…

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00189 Published 2024-04-17 Partial fix · 4.19.311, 5.4.273 +7 CWE-362