Read the docs
Red Hat Security Advisory

RHSA-2025:18098

kernel-rt security update

Released 2025-10-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 7 records

Priority MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading to a use-after-free of the cinode structu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00458 Published 2025-08-16 Partial fix · 3.17, 4.10 +9 CWE-416
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Gerrard's report [1], there are use cases where a netem child qdi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00232 Published 2025-05-20 Fixed in 5.10.238, 5.15.182 +5 CWE-415
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00229 Published 2025-05-08 Partial fix · 5.4.293, 5.10.237 +6 CWE-416
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpi_info is not…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00199 Published 2025-06-18 Partial fix · 4.19.256, 5.4.211 +5 CWE-416
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3_GEVNTCOUNT.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00248 Published 2025-05-08 Partial fix · 5.4.293, 5.10.237 +6 CWE-787
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00219 Published 2025-07-30 Partial fix · 5.4.295, 5.10.239 +6
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading to MMIO…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00216 Published 2025-07-04 Partial fix · 5.4.295, 5.10.239 +6 CWE-191