Red Hat Security AdvisoryRHSA-2025:13962
kernel security update
Released 2025-08-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.35.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.35.1.el9_6, kernel-64k-devel-5.14.0-570.35.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.35.1.el9_6, kernel-64k-5.14.0-570.35.1.el9_6, kernel-64k-core-5.14.0-570.35.1.el9_6 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.35.1.el9_6, libperf-5.14.0-570.35.1.el9_6
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.35.1.el9_6, kernel-rt-64k-5.14.0-570.35.1.el9_6, kernel-rt-64k-core-5.14.0-570.35.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.35.1.el9_6, kernel-rt-core-5.14.0-570.35.1.el9_6, kernel-rt-debug-5.14.0-570.35.1.el9_6 +11
Fixes 8 records
Priority MEDIUM 42
In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock After recent changes in net-next TCP compacts skbs much more aggressively.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00468 · Published 2025-07-28 · Partial fix · 6.1, 6.1.147 +4 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in vhci_flush() without repro.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00182 · Published 2025-07-09 · Partial fix · 5.10.259, 5.15.209 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: unshare page tables during VMA split, not before Currently, __split_vma() triggers hugetlb page table unsharing through vm_ops->may_split().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00214 · Published 2025-06-28 · Partial fix · 5.10.239, 5.15.186 +5
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a use-after-free issue in eth_skb_pkt_type()[1].
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00211 · Published 2025-03-27 · Fixed in 6.1.130, 6.6.80 +3 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: net: fix udp gso skb_segment after pull from frag_list Commit a1e40ac5b5e9 ("net: gso: fix udp gso fraglist segmentation after pull from frag_list") det…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0047 · Published 2025-07-03 · Fixed in 6.1.142, 6.6.94 +5 CWE-401
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table that may have previously been shared across pro…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0016 · Published 2025-06-28 · Partial fix · 5.10.239, 5.15.186 +5 CWE-362
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_c…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00187 · Published 2025-07-03 · Partial fix · 5.15.186, 6.1.142 +4 CWE-125
Priority LOW 26
Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local acc…
CVSS 4.0MEDIUM 5.7· Local · Low privileges · No interaction · EPSS 0.00426 · Published 2025-05-13 · Partial fix CWE-1421
THREATIST.IORead the docs