Red Hat Security AdvisoryRHSA-2025:18318
kernel security update
Released 2025-10-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-55.40.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.40.1.el10_0, kernel-64k-devel-6.12.0-55.40.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-55.40.1.el10_0, kernel-64k-6.12.0-55.40.1.el10_0, kernel-64k-core-6.12.0-55.40.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-55.40.1.el10_0, libperf-6.12.0-55.40.1.el10_0
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-55.40.1.el10_0, kernel-rt-64k-6.12.0-55.40.1.el10_0, kernel-rt-64k-core-6.12.0-55.40.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-55.40.1.el10_0, kernel-rt-core-6.12.0-55.40.1.el10_0, kernel-rt-debug-6.12.0-55.40.1.el10_0 +11
Fixes 6 records
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free window by correcting the buffer release sequence in the deferred r…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00481 · Published 2025-09-19 · Partial fix · 5.4.299, 5.10.243 +6 CWE-787
Priority MEDIUM 42
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tls_alert_recv due to its assumption that there is v…
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00348 · Published 2025-08-19 · Partial fix · 6.6.102, 6.12.42 +3
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EP_MAX_NESTS+1 links.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00185 · Published 2025-08-19 · Partial fix · 2.6.33, 2.6.34 +10 CWE-674
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: ipv6: reject malicious packets in ipv6_gso_segment() syzbot was able to craft a packet with very long IPv6 extension headers leading to an overflow of s…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00191 · Published 2025-08-19 · Fixed in 5.4.297, 5.10.241 +7
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00167 · Published 2025-09-16 · Partial fix · 3.9, 5.4.298 +7 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALL_FLUSH_VIRTUAL_AD…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2025-07-19 · Fixed in 6.6.103, 6.12.41 +2
THREATIST.IORead the docs