Red Hat Security AdvisoryRHSA-2025:17124
kernel security update
Released 2025-10-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.162.1.el8_6, kernel-4.18.0-372.162.1.el8_6, kernel-abi-stablelists-4.18.0-372.162.1.el8_6 +14
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.162.1.el8_6, kernel-4.18.0-372.162.1.el8_6, kernel-abi-stablelists-4.18.0-372.162.1.el8_6 +19
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.162.1.el8_6, kernel-4.18.0-372.162.1.el8_6, kernel-abi-stablelists-4.18.0-372.162.1.el8_6 +14
Fixes 6 records
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading to a use-after-free of the cinode structu…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00458 · Published 2025-08-16 · Partial fix · 3.17, 4.10 +9 CWE-416
Priority MEDIUM 47
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() igmp6_send() can be called without RTNL or RCU being held.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.07804 · Published 2025-02-27 · Partial fix · 5.10.271, 5.15.222 +5 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on qfq_aggregate A race condition can occur when 'agg' is modified in qfq_change_agg (called during qfq_enqueue)…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00141 · Published 2025-07-28 · Partial fix · 5.4.297, 5.10.241 +6 CWE-362
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: md-raid10: fix KASAN warning There's a KASAN warning in raid10_remove_disk when running the lvm test lvconvert-raid-reshape.sh.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00245 · Published 2025-06-18 · Partial fix · 4.9.326, 4.14.291 +7 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading to MMIO…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00216 · Published 2025-07-04 · Partial fix · 5.4.295, 5.10.239 +6 CWE-191
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0023 · Published 2025-04-16 · Partial fix · 5.4.301, 5.10.246 +7 CWE-401
THREATIST.IORead the docs