TI-2025-25802 CVE-2025-38464 · GHSA-vwv2-838r-2q6p
tipc: Fix use-after-free in tipc_conn_close().
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close().
RHSA-2025:15227
kernel security update
Released 2025-09-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.136.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.136.1.el9_2, kernel-64k-devel-5.14.0-284.136.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.136.1.el9_2, kernel-5.14.0-284.136.1.el9_2, kernel-64k-5.14.0-284.136.1.el9_2 +29
Fixes 4 records
TI-2025-25589 CVE-2025-38250 · GHSA-6r74-5vg7-24jv
Bluetooth: hci_core: Fix use-after-free in vhci_flush()
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in vhci_flush() without repro.
TI-2025-25426 CVE-2025-38085 · GHSA-5q6f-wm2q-mpgg
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table that may have previously been shared across pro…
TI-2025-25500 CVE-2025-38159 · GHSA-92p5-rr34-c98q
wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_c…