Red Hat Security Advisory

RHSA-2025:14413

kernel security update

Released 2025-08-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.7) bpftool-3.10.0-1062.99.1.el7, kernel-3.10.0-1062.99.1.el7, kernel-abi-whitelists-3.10.0-1062.99.1.el7 +8
Red Hat Enterprise Linux Server Optional AUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.99.1.el7

Fixes 3 records

TI-2025-25689 CVE-2025-38350 · GHSA-6mr5-83vp-r7m7

net/sched: Always pass notifications when child class becomes empty

LOW 36

In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue oper…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00297 Published 2025-07-19 Partial fix · 5.4.296, 5.10.240 +7 CWE-416

TI-2025-25345 CVE-2025-38000 · GHSA-5fqh-wrrw-3qc9

sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()

LOW 36

In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() When enqueuing the first packet to an HFSC class, hfsc_enqueue() calls the child qdi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00241 Published 2025-06-06 Partial fix · 5.4.294, 5.10.238 +6 CWE-416

TI-2025-25518 CVE-2025-38177 · GHSA-9pjq-r2xc-hgwc

sch_hfsc: make hfsc_qlen_notify() idempotent

LOW 33

In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either and not friendly to its callers, like fq_codel_dequeue().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00217 Published 2025-07-04 Partial fix · 5.4.297, 5.10.241 +6 CWE-459