Red Hat Security AdvisoryRHSA-2025:18281
kernel security update
Released 2025-10-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.55.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.55.1.el9_6, kernel-64k-devel-5.14.0-570.55.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.55.1.el9_6, kernel-64k-5.14.0-570.55.1.el9_6, kernel-64k-core-5.14.0-570.55.1.el9_6 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.55.1.el9_6, libperf-5.14.0-570.55.1.el9_6
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.55.1.el9_6, kernel-rt-64k-5.14.0-570.55.1.el9_6, kernel-rt-64k-core-5.14.0-570.55.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.55.1.el9_6, kernel-rt-core-5.14.0-570.55.1.el9_6, kernel-rt-debug-5.14.0-570.55.1.el9_6 +11
Fixes 7 records
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS over TLS in tls_alert_recv() due to its assumption it c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00633 · Published 2025-08-19 · Partial fix · 6.6.102, 6.12.42 +3 CWE-754
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free window by correcting the buffer release sequence in the deferred r…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00481 · Published 2025-09-19 · Partial fix · 5.4.299, 5.10.243 +6 CWE-787
Priority MEDIUM 42
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tls_alert_recv due to its assumption that there is v…
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00348 · Published 2025-08-19 · Partial fix · 6.6.102, 6.12.42 +3
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memor…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00222 · Published 2025-09-19 · Partial fix · 6.1.151, 6.3 +4 CWE-787
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpi_info is not…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00199 · Published 2025-06-18 · Partial fix · 4.19.256, 5.4.211 +5 CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00167 · Published 2025-09-16 · Partial fix · 3.9, 5.4.298 +7 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register().
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00206 · Published 2025-04-16 · Partial fix · 5.10.259, 5.15.210 +7 CWE-252
THREATIST.IORead the docs