Red Hat Security AdvisoryRHSA-2025:16880
kernel security update
Released 2025-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.49.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.49.1.el9_6, kernel-64k-devel-5.14.0-570.49.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.49.1.el9_6, kernel-64k-5.14.0-570.49.1.el9_6, kernel-64k-core-5.14.0-570.49.1.el9_6 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.49.1.el9_6, libperf-5.14.0-570.49.1.el9_6
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.49.1.el9_6, kernel-rt-64k-5.14.0-570.49.1.el9_6, kernel-rt-64k-core-5.14.0-570.49.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.49.1.el9_6, kernel-rt-core-5.14.0-570.49.1.el9_6, kernel-rt-debug-5.14.0-570.49.1.el9_6 +11
Fixes 5 records
Priority CRITICAL 100KEV
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - on…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03198 · Published 2025-09-05 · Fixed in 6.1.149, 6.6.103 +3 CWE-754
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading to a use-after-free of the cinode structu…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00458 · Published 2025-08-16 · Partial fix · 3.17, 4.10 +9 CWE-416
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry A crash in conntrack was reported while trying to unlink the conntrack entry fr…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00463 · Published 2025-07-28 · Partial fix · 5.19, 6.1.147 +4 CWE-908
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: io_uring/futex: ensure io_futex_wait() cleans up properly on failure The io_futex_data is allocated upfront and assigned to the io_kiocb async_data fiel…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2025-09-05 · Partial fix · 6.12.44, 6.16.4 +1 CWE-672
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctp_rcv A cloned head skb still shares these frag skbs in fraglist with the original head skb.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00171 · Published 2025-09-04 · Partial fix · 5.4.297, 5.10.241 +7 CWE-908
THREATIST.IORead the docs