Red Hat Security AdvisoryRHSA-2025:17241
kernel security update
Released 2025-10-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.92.1.el9_4, libperf-5.14.0-427.92.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.92.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.92.1.el9_4, kernel-64k-devel-5.14.0-427.92.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.92.1.el9_4, kernel-5.14.0-427.92.1.el9_4, kernel-64k-5.14.0-427.92.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.92.1.el9_4, kernel-rt-core-5.14.0-427.92.1.el9_4, kernel-rt-debug-5.14.0-427.92.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.92.1.el9_4, kernel-rt-core-5.14.0-427.92.1.el9_4, kernel-rt-debug-5.14.0-427.92.1.el9_4 +11
Fixes 7 records
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading to a use-after-free of the cinode structu…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00458 · Published 2025-08-16 · Partial fix · 3.17, 4.10 +9 CWE-416
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry A crash in conntrack was reported while trying to unlink the conntrack entry fr…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00463 · Published 2025-07-28 · Partial fix · 5.19, 6.1.147 +4 CWE-908
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md property on xfrm interfaces can only be set on device creation,…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2025-08-12 · Partial fix · 6.1.148, 6.6.101 +3 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00188 · Published 2025-07-25 · Partial fix · 6.6.99, 6.12.39 +2 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00229 · Published 2025-05-08 · Partial fix · 5.4.293, 5.10.237 +6 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: ceph: fix race condition validating r_parent before applying state Add validation to ensure the cached parent directory inode matches the directory info…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00154 · Published 2025-10-01 · Partial fix · 6.6.160, 6.12.48 +2 CWE-362
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading to MMIO…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00216 · Published 2025-07-04 · Partial fix · 5.4.295, 5.10.239 +6 CWE-191
THREATIST.IORead the docs