Red Hat Security AdvisoryRHSA-2025:16904
kernel security update
Released 2025-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-55.37.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.37.1.el10_0, kernel-64k-devel-6.12.0-55.37.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-55.37.1.el10_0, kernel-64k-6.12.0-55.37.1.el10_0, kernel-64k-core-6.12.0-55.37.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-55.37.1.el10_0, libperf-6.12.0-55.37.1.el10_0
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-55.37.1.el10_0, kernel-rt-64k-6.12.0-55.37.1.el10_0, kernel-rt-64k-core-6.12.0-55.37.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-55.37.1.el10_0, kernel-rt-core-6.12.0-55.37.1.el10_0, kernel-rt-debug-6.12.0-55.37.1.el10_0 +11
Fixes 6 records
Priority CRITICAL 100KEV
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - on…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03198 · Published 2025-09-05 · Fixed in 6.1.149, 6.6.103 +3 CWE-754
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading to a use-after-free of the cinode structu…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00458 · Published 2025-08-16 · Partial fix · 3.17, 4.10 +9 CWE-416
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: io_uring/futex: ensure io_futex_wait() cleans up properly on failure The io_futex_data is allocated upfront and assigned to the io_kiocb async_data fiel…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2025-09-05 · Partial fix · 6.12.44, 6.16.4 +1 CWE-672
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbd_response slab to allow usercopy The handling of received data in the smbdirect client code involves using copy_to_iter() to copy data…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00389 · Published 2025-08-16 · Fixed in 6.12.36, 6.15.8 +1 CWE-1188
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass Export anon_inode_make_secure_inode() to allow KVM guest_memfd to create anonymou…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00198 · Published 2025-07-25 · Partial fix · 6.1.146, 6.6.97 +3
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrup…
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00171 · Published 2025-09-05 · Partial fix · 6.1.149, 6.6.103 +3 CWE-476
THREATIST.IORead the docs