Red Hat Security AdvisoryRHSA-2025:14748
kernel security update
Released 2025-08-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) bpftool-3.10.0-1160.137.1.el7, kernel-3.10.0-1160.137.1.el7, kernel-abi-whitelists-3.10.0-1160.137.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) kernel-debug-devel-3.10.0-1160.137.1.el7, kernel-tools-libs-devel-3.10.0-1160.137.1.el7
Fixes 9 records
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue oper…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2025-07-19 · Partial fix · 5.4.296, 5.10.240 +7 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() When enqueuing the first packet to an HFSC class, hfsc_enqueue() calls the child qdi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00241 · Published 2025-06-06 · Partial fix · 5.4.294, 5.10.238 +6 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00235 · Published 2025-04-01 · Partial fix · 5.4.291, 5.10.235 +6 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller detected a use-after-free issue in ext4_insert_dentry that was caused by out-of-bounds access due to in…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00232 · Published 2025-05-01 · Partial fix · 5.4.293, 4.5 +13 CWE-193
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2025-02-27 · Partial fix · 5.4.291, 5.10.235 +6 CWE-415
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: drivers:md:fix a potential use-after-free bug In line 2884, "raid5_release_stripe(sh);" drops the reference to sh and may cause sh to be released.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00258 · Published 2025-06-18 · Partial fix · 4.9.326, 4.14.291 +6 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either and not friendly to its callers, like fq_codel_dequeue().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00217 · Published 2025-07-04 · Partial fix · 5.4.297, 5.10.241 +6 CWE-459
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00208 · Published 2025-06-18 · Partial fix · 4.19.256, 5.4.211 +4 CWE-1284
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() `struct vmci_event_qp` allocated by qp_notify_peer() contains padding, which may carry…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2025-05-01 · Partial fix · 4.9.334, 4.14.300 +6 CWE-908