Red Hat Security Advisory

RHSA-2025:15016

kernel security update

Released 2025-09-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.85.1.el9_4, libperf-5.14.0-427.85.1.el9_4
Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.85.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.85.1.el9_4, kernel-64k-devel-5.14.0-427.85.1.el9_4 +11
Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.85.1.el9_4, kernel-5.14.0-427.85.1.el9_4, kernel-64k-5.14.0-427.85.1.el9_4 +29
Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.85.1.el9_4, kernel-rt-core-5.14.0-427.85.1.el9_4, kernel-rt-debug-5.14.0-427.85.1.el9_4 +9
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.85.1.el9_4, kernel-rt-core-5.14.0-427.85.1.el9_4, kernel-rt-debug-5.14.0-427.85.1.el9_4 +11

Fixes 10 records

TI-2024-24446 CVE-2024-36896

USB: core: Fix access violation during port device removal

MEDIUM 47

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkaller revealed a bug in port.c:disable_store(): usb_hub_to_struct_…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00923 Published 2024-05-30 Partial fix · 6.1.91, 6.6.31 +2 CWE-476

TI-2025-25689 CVE-2025-38350 · GHSA-6mr5-83vp-r7m7

net/sched: Always pass notifications when child class becomes empty

LOW 36

In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue oper…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00297 Published 2025-07-19 Partial fix · 5.4.296, 5.10.240 +7 CWE-416

TI-2025-25420 CVE-2025-38079 · GHSA-r6vx-mj26-9m2q

crypto: algif_hash - fix double free in hash_accept

LOW 35

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fail…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00215 Published 2025-06-18 Partial fix · 5.4.294, 5.10.238 +6 CWE-415

TI-2025-15817 CVE-2025-21867 · GHSA-g779-v36v-3w99

bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a use-after-free issue in eth_skb_pkt_type()[1].

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00211 Published 2025-03-27 Fixed in 6.1.130, 6.6.80 +3 CWE-416

TI-2025-25518 CVE-2025-38177 · GHSA-9pjq-r2xc-hgwc

sch_hfsc: make hfsc_qlen_notify() idempotent

LOW 33

In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either and not friendly to its callers, like fq_codel_dequeue().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00217 Published 2025-07-04 Partial fix · 5.4.297, 5.10.241 +6 CWE-459

TI-2024-17800 CVE-2024-26933 · GHSA-4gjr-xffj-592q

USB: core: Fix deadlock in port "disable" sysfs attribute

LOW 33

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port "disable" sysfs attribute The show and store callback routines for the "disable" sysfs attribute file in port.c acquire…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00177 Published 2024-05-01 Partial fix · 6.1.84, 6.6.24 +3 CWE-667

TI-2023-28938 CVE-2023-52598 · GHSA-c4rp-h96r-7xm9

s390/ptrace: handle setting of fpc register correctly

LOW 31

In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the floating point control (fpc) register of a traced process is modified with t…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00242 Published 2024-03-06 Partial fix · 4.19.307, 5.4.269 +6 CWE-125

TI-2024-28096 CVE-2024-42090 · GHSA-pr22-x636-xp32

pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER

LOW 24

In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER In create_pinctrl(), pinctrl_maps_mutex is acquired before calling add_setting().

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00187 Published 2024-07-29 Partial fix · 4.19.317, 5.4.279 +6 CWE-667

TI-2023-29063 CVE-2023-52730 · GHSA-64v3-vwp6-q2hj

mmc: sdio: fix possible resource leaks in some error paths

LOW 24

In the Linux kernel, the following vulnerability has been resolved: mmc: sdio: fix possible resource leaks in some error paths If sdio_add_func() or sdio_init_func() fails, sdio_remove_func() can not release the resource…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00251 Published 2024-05-21 Partial fix · 4.14.306, 4.19.273 +5 CWE-401

TI-2023-29020 CVE-2023-52686 · GHSA-7g29-9wjm-w488

powerpc/powernv: Add a null pointer check in opal_event_init()

LOW 24

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon fail…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00252 Published 2024-05-17 Partial fix · 4.19.306, 5.4.268 +6 CWE-476