Red Hat Security AdvisoryRHSA-2025:15668
kernel security update
Released 2025-09-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.88.1.el9_4, libperf-5.14.0-427.88.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.88.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.88.1.el9_4, kernel-64k-devel-5.14.0-427.88.1.el9_4 +10
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.88.1.el9_4, kernel-5.14.0-427.88.1.el9_4, kernel-64k-5.14.0-427.88.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.88.1.el9_4, kernel-rt-core-5.14.0-427.88.1.el9_4, kernel-rt-debug-5.14.0-427.88.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.88.1.el9_4, kernel-rt-core-5.14.0-427.88.1.el9_4, kernel-rt-debug-5.14.0-427.88.1.el9_4 +11
Fixes 10 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01357 · Published 2025-07-22 · Fixed in 5.4.295, 5.10.239 +6 CWE-367
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Gerrard's report [1], there are use cases where a netem child qdi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00232 · Published 2025-05-20 · Fixed in 5.10.238, 5.15.182 +5 CWE-415
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00217 · Published 2025-07-25 · Partial fix · 5.4.296, 5.10.240 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in vhci_flush() without repro.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00182 · Published 2025-07-09 · Partial fix · 5.10.259, 5.15.209 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00222 · Published 2025-04-16 · Partial fix · 5.15.180, 6.1.134 +5 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table that may have previously been shared across pro…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0016 · Published 2025-06-28 · Partial fix · 5.10.239, 5.15.186 +5 CWE-362
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not r…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00235 · Published 2024-07-29 · Partial fix · 4.19.317, 5.4.279 +6 CWE-787
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_c…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00187 · Published 2025-07-03 · Partial fix · 5.15.186, 6.1.142 +4 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy() for BIOS version The strlcat() with FORTIFY support is triggering a panic because it thinks the target buffer will overflow alt…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00218 · Published 2025-07-10 · Partial fix · 5.4.295, 5.10.239 +6
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: x86: fix user address masking non-canonical speculation issue It turns out that AMD has a "Meltdown Lite(tm)" issue with non-canonical accesses in kerne…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00239 · Published 2024-11-05 · Partial fix · 6.11.6, 6.12 CWE-203
THREATIST.IORead the docs