Red Hat Security Advisory

RHSA-2025:15005

kernel security update

Released 2025-09-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-55.30.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.30.1.el10_0, kernel-64k-devel-6.12.0-55.30.1.el10_0 +12
Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-55.30.1.el10_0, kernel-64k-6.12.0-55.30.1.el10_0, kernel-64k-core-6.12.0-55.30.1.el10_0 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-55.30.1.el10_0, libperf-6.12.0-55.30.1.el10_0
Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-55.30.1.el10_0, kernel-rt-64k-6.12.0-55.30.1.el10_0, kernel-rt-64k-core-6.12.0-55.30.1.el10_0 +21
Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-55.30.1.el10_0, kernel-rt-core-6.12.0-55.30.1.el10_0, kernel-rt-debug-6.12.0-55.30.1.el10_0 +11

Fixes 7 records

TI-2025-25810 CVE-2025-38472 · GHSA-979q-6jjc-29jh

netfilter: nf_conntrack: fix crash due to removal of uninitialised entry

MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry A crash in conntrack was reported while trying to unlink the conntrack entry fr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00463 Published 2025-07-28 Partial fix · 5.19, 6.1.147 +4 CWE-908

TI-2025-25551 CVE-2025-38211 · GHSA-wcw7-g3wh-rxf7

RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction The commit 59c68ac31e15 ("iw_cm: free cm_id resources on the last deref") simplifi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00415 Published 2025-07-04 Partial fix · 5.4.296, 5.10.240 +6 CWE-416

TI-2025-25802 CVE-2025-38464 · GHSA-vwv2-838r-2q6p

tipc: Fix use-after-free in tipc_conn_close().

LOW 35

In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00217 Published 2025-07-25 Partial fix · 5.4.296, 5.10.240 +6 CWE-416

TI-2025-25173 CVE-2025-37823 · GHSA-gr82-7xxj-rqx8

net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too

LOW 35

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00229 Published 2025-05-08 Partial fix · 5.4.293, 5.10.237 +6 CWE-416

TI-2025-25799 CVE-2025-38461 · GHSA-482q-8xhf-gxrw

vsock: Fix transport_* TOCTOU

LOW 30

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment may race with module unload.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00142 Published 2025-07-25 Partial fix · 5.10.240, 5.15.189 +5 CWE-367

TI-2025-25559 CVE-2025-38220 · GHSA-m9fq-g2m8-9p75

ext4: only dirty folios when data journaling regular files

LOW 24

In the Linux kernel, the following vulnerability has been resolved: ext4: only dirty folios when data journaling regular files fstest generic/388 occasionally reproduces a crash that looks as follows: BUG: kernel NULL po…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0017 Published 2025-07-04 Fixed in 6.6.95, 6.12.35 +2 CWE-476

TI-2025-16007 CVE-2025-22058 · GHSA-qh2m-xfgm-crh8

udp: Fix memory accounting leak.

LOW 24

In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0023 Published 2025-04-16 Partial fix · 5.4.301, 5.10.246 +7 CWE-401