Red Hat Security AdvisoryRHSA-2025:15782
kernel security update
Released 2025-09-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-55.33.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.33.1.el10_0, kernel-64k-devel-6.12.0-55.33.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-55.33.1.el10_0, kernel-64k-6.12.0-55.33.1.el10_0, kernel-64k-core-6.12.0-55.33.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-55.33.1.el10_0, libperf-6.12.0-55.33.1.el10_0
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-55.33.1.el10_0, kernel-rt-64k-6.12.0-55.33.1.el10_0, kernel-rt-64k-core-6.12.0-55.33.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-55.33.1.el10_0, kernel-rt-core-6.12.0-55.33.1.el10_0, kernel-rt-debug-6.12.0-55.33.1.el10_0 +11
Fixes 8 records
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md property on xfrm interfaces can only be set on device creation,…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2025-08-12 · Partial fix · 6.1.148, 6.6.101 +3 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq->canceling is set when queue is frozen Now ublk driver depends on `ubq->canceling` for deciding if the request can be dispatched via…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00205 · Published 2025-04-16 · Fixed in 6.12.23, 6.13.11 +2 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM When performing Generic Segmentation Offload (GSO) on an IPv6 packet that conta…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00375 · Published 2025-09-11 · Fixed in 6.1.149, 6.6.103 +8
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() pmc->idev is still used in ip6_mc_clear_src(), so as mld_clear_delrec() does, the reference should…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00173 · Published 2025-08-16 · Partial fix · 5.15.190, 6.1.147 +4
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00219 · Published 2025-07-30 · Partial fix · 5.4.295, 5.10.239 +6
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: tcp: Correct signedness in skb remaining space calculation Syzkaller reported a bug [1] where sk->sk_forward_alloc can overflow.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00188 · Published 2025-07-25 · Fixed in 6.6.99, 6.12.39 +2 CWE-191
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: idpf: convert control queue mutex to a spinlock With VIRTCHNL2_CAP_MACFILTER enabled, the following warning is generated on module load: [ 324.701677] B…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00189 · Published 2025-07-25 · Fixed in 6.12.37, 6.15.6 +1
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy() for BIOS version The strlcat() with FORTIFY support is triggering a panic because it thinks the target buffer will overflow alt…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00218 · Published 2025-07-10 · Partial fix · 5.4.295, 5.10.239 +6
THREATIST.IORead the docs