Read the docs
Red Hat Security Advisory

RHSA-2025:15670

kernel security update

Released 2025-09-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 11 records

Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01357 Published 2025-07-22 Fixed in 5.4.295, 5.10.239 +6 CWE-367
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00217 Published 2025-07-25 Partial fix · 5.4.296, 5.10.240 +6 CWE-416
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in vhci_flush() without repro.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00182 Published 2025-07-09 Partial fix · 5.10.259, 5.15.209 +5 CWE-416
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fail…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00215 Published 2025-06-18 Partial fix · 5.4.294, 5.10.238 +6 CWE-415
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00222 Published 2025-04-16 Partial fix · 5.15.180, 6.1.134 +5 CWE-416
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table that may have previously been shared across pro…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0016 Published 2025-06-28 Partial fix · 5.10.239, 5.15.186 +5 CWE-362
Priority LOW 31

A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00239 Published 2023-05-08 Partial fix CWE-416
Priority LOW 30

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_c…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00187 Published 2025-07-03 Partial fix · 5.15.186, 6.1.142 +4 CWE-125
TI-2025-16007 CVE-2025-22058 · GHSA-qh2m-xfgm-crh8

udp: Fix memory accounting leak.

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0023 Published 2025-04-16 Partial fix · 5.4.301, 5.10.246 +7 CWE-401
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix null-ptr-deref in vkms_release() A null-ptr-deref is triggered when it tries to destroy the workqueue in vkms->output.composer_workq in vk…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00202 Published 2025-09-17 Partial fix · 5.10.173, 5.15.99 +3 CWE-476
TI-2022-25754 CVE-2022-50269 · GHSA-22jx-v9jm-qjqq

drm/vkms: Fix memory leak in vkms_init()

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix memory leak in vkms_init() A memory leak was reported after the vkms module install failed.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00159 Published 2025-09-15 Partial fix · 5.15.99, 6.1.16 +2 CWE-401