Read the docs
Red Hat Security Advisory

RHSA-2025:17123

kernel-rt security update

Released 2025-10-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 6 records

Priority MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading to a use-after-free of the cinode structu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00458 Published 2025-08-16 Partial fix · 3.17, 4.10 +9 CWE-416
Priority MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry A crash in conntrack was reported while trying to unlink the conntrack entry fr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00463 Published 2025-07-28 Partial fix · 5.19, 6.1.147 +4 CWE-908
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00188 Published 2025-07-25 Partial fix · 6.6.99, 6.12.39 +2 CWE-416
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3_GEVNTCOUNT.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00248 Published 2025-05-08 Partial fix · 5.4.293, 5.10.237 +6 CWE-787
TI-2025-25799 CVE-2025-38461 · GHSA-482q-8xhf-gxrw

vsock: Fix transport_* TOCTOU

Priority LOW 30

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment may race with module unload.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00142 Published 2025-07-25 Partial fix · 5.10.240, 5.15.189 +5 CWE-367
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading to MMIO…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00216 Published 2025-07-04 Partial fix · 5.4.295, 5.10.239 +6 CWE-191