Red Hat Security AdvisoryRHSA-2025:17958
kernel security update
Released 2025-10-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.94.1.el9_4, libperf-5.14.0-427.94.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.94.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.94.1.el9_4, kernel-64k-devel-5.14.0-427.94.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.94.1.el9_4, kernel-5.14.0-427.94.1.el9_4, kernel-64k-5.14.0-427.94.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.94.1.el9_4, kernel-rt-core-5.14.0-427.94.1.el9_4, kernel-rt-debug-5.14.0-427.94.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.94.1.el9_4, kernel-rt-core-5.14.0-427.94.1.el9_4, kernel-rt-debug-5.14.0-427.94.1.el9_4 +11
Fixes 6 records
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS over TLS in tls_alert_recv() due to its assumption it c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00633 · Published 2025-08-19 · Partial fix · 6.6.102, 6.12.42 +3 CWE-754
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpi_info is not…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00199 · Published 2025-06-18 · Partial fix · 4.19.256, 5.4.211 +5 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() pmc->idev is still used in ip6_mc_clear_src(), so as mld_clear_delrec() does, the reference should…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00173 · Published 2025-08-16 · Partial fix · 5.15.190, 6.1.147 +4
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00219 · Published 2025-07-30 · Partial fix · 5.4.295, 5.10.239 +6
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: idpf: convert control queue mutex to a spinlock With VIRTCHNL2_CAP_MACFILTER enabled, the following warning is generated on module load: [ 324.701677] B…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00189 · Published 2025-07-25 · Fixed in 6.12.37, 6.15.6 +1
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00191 · Published 2025-05-02 · Partial fix · 4.14.311, 4.19.279 +6 CWE-401
THREATIST.IORead the docs