Red Hat Security Advisory

RHSA-2025:17192

kernel-rt security update

Released 2025-10-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt-5.14.0-70.148.1.rt21.220.el9_0, kernel-rt-core-5.14.0-70.148.1.rt21.220.el9_0, kernel-rt-debug-5.14.0-70.148.1.rt21.220.el9_0 +9
Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt-5.14.0-70.148.1.rt21.220.el9_0, kernel-rt-core-5.14.0-70.148.1.rt21.220.el9_0, kernel-rt-debug-5.14.0-70.148.1.rt21.220.el9_0 +7

Fixes 5 records

TI-2025-25551 CVE-2025-38211 · GHSA-wcw7-g3wh-rxf7

RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction The commit 59c68ac31e15 ("iw_cm: free cm_id resources on the last deref") simplifi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00415 Published 2025-07-04 Partial fix · 5.4.296, 5.10.240 +6 CWE-416

TI-2025-25787 CVE-2025-38449 · GHSA-p8xh-x6wj-7w7g

drm/gem: Acquire references on GEM handles for framebuffers

LOW 35

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00188 Published 2025-07-25 Partial fix · 6.6.99, 6.12.39 +2 CWE-416

TI-2022-25463 CVE-2022-49969 · GHSA-h66g-j8m6-ppxf

drm/amd/display: clear optc underflow before turn off odm clock

LOW 34

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: clear optc underflow before turn off odm clock [Why] After ODM clock off, optc underflow bit will be kept there always and clear not wo…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0029 Published 2025-06-18 Partial fix · 4.19.257, 5.4.212 +4

TI-2022-25697 CVE-2022-50211 · GHSA-9p4w-x9r2-x682

md-raid10: fix KASAN warning

LOW 31

In the Linux kernel, the following vulnerability has been resolved: md-raid10: fix KASAN warning There's a KASAN warning in raid10_remove_disk when running the lvm test lvconvert-raid-reshape.sh.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00245 Published 2025-06-18 Partial fix · 4.9.326, 4.14.291 +7 CWE-125

TI-2025-25799 CVE-2025-38461 · GHSA-482q-8xhf-gxrw

vsock: Fix transport_* TOCTOU

LOW 30

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment may race with module unload.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00142 Published 2025-07-25 Partial fix · 5.10.240, 5.15.189 +5 CWE-367