Red Hat Security AdvisoryRHSA-2025:15658
kernel-rt security update
Released 2025-09-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt-5.14.0-70.146.1.rt21.218.el9_0, kernel-rt-core-5.14.0-70.146.1.rt21.218.el9_0, kernel-rt-debug-5.14.0-70.146.1.rt21.218.el9_0 +9
- Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt-5.14.0-70.146.1.rt21.218.el9_0, kernel-rt-core-5.14.0-70.146.1.rt21.218.el9_0, kernel-rt-debug-5.14.0-70.146.1.rt21.218.el9_0 +7
Fixes 11 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01357 · Published 2025-07-22 · Fixed in 5.4.295, 5.10.239 +6 CWE-367
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00217 · Published 2025-07-25 · Partial fix · 5.4.296, 5.10.240 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in vhci_flush() without repro.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00182 · Published 2025-07-09 · Partial fix · 5.10.259, 5.15.209 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fail…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00215 · Published 2025-06-18 · Partial fix · 5.4.294, 5.10.238 +6 CWE-415
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00222 · Published 2025-04-16 · Partial fix · 5.15.180, 6.1.134 +5 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table that may have previously been shared across pro…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0016 · Published 2025-06-28 · Partial fix · 5.10.239, 5.15.186 +5 CWE-362
Priority LOW 31
A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00239 · Published 2023-05-08 · Partial fix CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_c…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00187 · Published 2025-07-03 · Partial fix · 5.15.186, 6.1.142 +4 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0023 · Published 2025-04-16 · Partial fix · 5.4.301, 5.10.246 +7 CWE-401
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix null-ptr-deref in vkms_release() A null-ptr-deref is triggered when it tries to destroy the workqueue in vkms->output.composer_workq in vk…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2025-09-17 · Partial fix · 5.10.173, 5.15.99 +3 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix memory leak in vkms_init() A memory leak was reported after the vkms module install failed.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00159 · Published 2025-09-15 · Partial fix · 5.15.99, 6.1.16 +2 CWE-401