Red Hat Security Advisory

RHSA-2025:13961

kernel-rt security update

Released 2025-08-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.70.1.rt7.411.el8_10, kernel-rt-core-4.18.0-553.70.1.rt7.411.el8_10, kernel-rt-debug-4.18.0-553.70.1.rt7.411.el8_10 +9
Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.70.1.rt7.411.el8_10, kernel-rt-core-4.18.0-553.70.1.rt7.411.el8_10, kernel-rt-debug-4.18.0-553.70.1.rt7.411.el8_10 +7

Fixes 5 records

TI-2025-25261 CVE-2025-37914 · GHSA-x88q-4f25-f826

net_sched: ets: Fix double list add in class with netem as child qdisc

LOW 36

In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Gerrard's report [1], there are use cases where a netem child qdi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00232 Published 2025-05-20 Fixed in 5.10.238, 5.15.182 +5 CWE-415

TI-2025-25589 CVE-2025-38250 · GHSA-6r74-5vg7-24jv

Bluetooth: hci_core: Fix use-after-free in vhci_flush()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in vhci_flush() without repro.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00182 Published 2025-07-09 Partial fix · 5.10.259, 5.15.209 +5 CWE-416

TI-2025-16046 CVE-2025-22097 · GHSA-5g5j-4w29-mr24

drm/vkms: Fix use after free and double free on init error

LOW 35

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00222 Published 2025-04-16 Partial fix · 5.15.180, 6.1.134 +5 CWE-416

TI-2022-25851 CVE-2022-50369 · GHSA-fv67-488v-7h86

drm/vkms: Fix null-ptr-deref in vkms_release()

LOW 24

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix null-ptr-deref in vkms_release() A null-ptr-deref is triggered when it tries to destroy the workqueue in vkms->output.composer_workq in vk…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00202 Published 2025-09-17 Partial fix · 5.10.173, 5.15.99 +3 CWE-476

TI-2022-25754 CVE-2022-50269 · GHSA-22jx-v9jm-qjqq

drm/vkms: Fix memory leak in vkms_init()

LOW 24

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix memory leak in vkms_init() A memory leak was reported after the vkms module install failed.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00159 Published 2025-09-15 Partial fix · 5.15.99, 6.1.16 +2 CWE-401