Red Hat Security AdvisoryRHSA-2025:17159
kernel security update
Released 2025-10-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.0) kernel-debug-devel-5.14.0-70.148.1.el9_0, kernel-debug-devel-matched-5.14.0-70.148.1.el9_0, kernel-devel-5.14.0-70.148.1.el9_0 +5
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) bpftool-5.14.0-70.148.1.el9_0, kernel-5.14.0-70.148.1.el9_0, kernel-abi-stablelists-5.14.0-70.148.1.el9_0 +14
Fixes 6 records
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction The commit 59c68ac31e15 ("iw_cm: free cm_id resources on the last deref") simplifi…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00415 · Published 2025-07-04 · Partial fix · 5.4.296, 5.10.240 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00188 · Published 2025-07-25 · Partial fix · 6.6.99, 6.12.39 +2 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: clear optc underflow before turn off odm clock [Why] After ODM clock off, optc underflow bit will be kept there always and clear not wo…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0029 · Published 2025-06-18 · Partial fix · 4.19.257, 5.4.212 +4
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: md-raid10: fix KASAN warning There's a KASAN warning in raid10_remove_disk when running the lvm test lvconvert-raid-reshape.sh.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00245 · Published 2025-06-18 · Partial fix · 4.9.326, 4.14.291 +7 CWE-125
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment may race with module unload.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00142 · Published 2025-07-25 · Partial fix · 5.10.240, 5.15.189 +5 CWE-367
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy() for BIOS version The strlcat() with FORTIFY support is triggering a panic because it thinks the target buffer will overflow alt…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00218 · Published 2025-07-10 · Partial fix · 5.4.295, 5.10.239 +6