Read the docs
Red Hat Security Advisory

RHSA-2025:14748

kernel security update

Released 2025-08-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 9 records

Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue oper…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00297 Published 2025-07-19 Partial fix · 5.4.296, 5.10.240 +7 CWE-416
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() When enqueuing the first packet to an HFSC class, hfsc_enqueue() calls the child qdi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00241 Published 2025-06-06 Partial fix · 5.4.294, 5.10.238 +6 CWE-416
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00235 Published 2025-04-01 Partial fix · 5.4.291, 5.10.235 +6 CWE-416
TI-2025-16935 CVE-2025-23150 · GHSA-jf2p-fggv-v92v

ext4: fix off-by-one error in do_split

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller detected a use-after-free issue in ext4_insert_dentry that was caused by out-of-bounds access due to in…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00232 Published 2025-05-01 Partial fix · 5.4.293, 4.5 +13 CWE-193
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00273 Published 2025-02-27 Partial fix · 5.4.291, 5.10.235 +6 CWE-415
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: drivers:md:fix a potential use-after-free bug In line 2884, "raid5_release_stripe(sh);" drops the reference to sh and may cause sh to be released.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00258 Published 2025-06-18 Partial fix · 4.9.326, 4.14.291 +6 CWE-416
TI-2025-25518 CVE-2025-38177 · GHSA-9pjq-r2xc-hgwc

sch_hfsc: make hfsc_qlen_notify() idempotent

Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either and not friendly to its callers, like fq_codel_dequeue().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00217 Published 2025-07-04 Partial fix · 5.4.297, 5.10.241 +6 CWE-459
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00208 Published 2025-06-18 Partial fix · 4.19.256, 5.4.211 +4 CWE-1284
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() `struct vmci_event_qp` allocated by qp_notify_peer() contains padding, which may carry…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00234 Published 2025-05-01 Partial fix · 4.9.334, 4.14.300 +6 CWE-908