Red Hat Security AdvisoryRHSA-2025:15661
kernel security update
Released 2025-09-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.42.2.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.42.2.el9_6, kernel-64k-devel-5.14.0-570.42.2.el9_6 +11
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.42.2.el9_6, kernel-64k-5.14.0-570.42.2.el9_6, kernel-64k-core-5.14.0-570.42.2.el9_6 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.42.2.el9_6, libperf-5.14.0-570.42.2.el9_6
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.42.2.el9_6, kernel-rt-64k-5.14.0-570.42.2.el9_6, kernel-rt-64k-core-5.14.0-570.42.2.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.42.2.el9_6, kernel-rt-core-5.14.0-570.42.2.el9_6, kernel-rt-debug-5.14.0-570.42.2.el9_6 +11
Fixes 4 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01357 · Published 2025-07-22 · Fixed in 5.4.295, 5.10.239 +6 CWE-367
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00188 · Published 2025-07-25 · Partial fix · 6.6.99, 6.12.39 +2 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00222 · Published 2025-04-16 · Partial fix · 5.15.180, 6.1.134 +5 CWE-416
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy() for BIOS version The strlcat() with FORTIFY support is triggering a panic because it thinks the target buffer will overflow alt…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00218 · Published 2025-07-10 · Partial fix · 5.4.295, 5.10.239 +6
THREATIST.IORead the docs