Red Hat Security AdvisoryRHSA-2025:15011
kernel security update
Released 2025-09-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.39.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.39.1.el9_6, kernel-64k-devel-5.14.0-570.39.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.39.1.el9_6, kernel-64k-5.14.0-570.39.1.el9_6, kernel-64k-core-5.14.0-570.39.1.el9_6 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.39.1.el9_6, libperf-5.14.0-570.39.1.el9_6
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.39.1.el9_6, kernel-rt-64k-5.14.0-570.39.1.el9_6, kernel-rt-64k-core-5.14.0-570.39.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.39.1.el9_6, kernel-rt-core-5.14.0-570.39.1.el9_6, kernel-rt-debug-5.14.0-570.39.1.el9_6 +11
Fixes 8 records
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction The commit 59c68ac31e15 ("iw_cm: free cm_id resources on the last deref") simplifi…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00415 · Published 2025-07-04 · Partial fix · 5.4.296, 5.10.240 +6 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue oper…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2025-07-19 · Partial fix · 5.4.296, 5.10.240 +7 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md property on xfrm interfaces can only be set on device creation,…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2025-08-12 · Partial fix · 6.1.148, 6.6.101 +3 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00217 · Published 2025-07-25 · Partial fix · 5.4.296, 5.10.240 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00229 · Published 2025-05-08 · Partial fix · 5.4.293, 5.10.237 +6 CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment may race with module unload.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00142 · Published 2025-07-25 · Partial fix · 5.10.240, 5.15.189 +5 CWE-367
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: use old 'nbands' while purging unused classes Shuang reported sch_ets test-case [1] crashing in ets_class_qlen_notify() after recent cha…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00183 · Published 2025-09-04 · Partial fix · 5.5, 5.10.241 +7 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading to MMIO…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00216 · Published 2025-07-04 · Partial fix · 5.4.295, 5.10.239 +6 CWE-191
THREATIST.IORead the docs