Red Hat Security AdvisoryRHSA-2025:15660
kernel security update
Released 2025-09-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.172.1.el8_4, kernel-4.18.0-305.172.1.el8_4, kernel-abi-stablelists-4.18.0-305.172.1.el8_4 +13
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bpftool-4.18.0-305.172.1.el8_4, kernel-4.18.0-305.172.1.el8_4, kernel-abi-stablelists-4.18.0-305.172.1.el8_4 +13
Fixes 7 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01357 · Published 2025-07-22 · Fixed in 5.4.295, 5.10.239 +6 CWE-367
Priority MEDIUM 47
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() igmp6_send() can be called without RTNL or RCU being held.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.07804 · Published 2025-02-27 · Partial fix · 5.10.271, 5.15.222 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00217 · Published 2025-07-25 · Partial fix · 5.4.296, 5.10.240 +6 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix stuck flows on cleanup due to pending work To clear the flow table on flow table free, the following sequence normally happens…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00249 · Published 2025-06-18 · Partial fix · 5.15.64, 5.19.6 +1 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table that may have previously been shared across pro…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0016 · Published 2025-06-28 · Partial fix · 5.10.239, 5.15.186 +5 CWE-362
Priority LOW 31
A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00239 · Published 2023-05-08 · Partial fix CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_c…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00187 · Published 2025-07-03 · Partial fix · 5.15.186, 6.1.142 +4 CWE-125