Red Hat Security AdvisoryRHSA-2025:19103
kernel-rt security update
Released 2025-10-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.81.1.rt7.422.el8_10, kernel-rt-core-4.18.0-553.81.1.rt7.422.el8_10, kernel-rt-debug-4.18.0-553.81.1.rt7.422.el8_10 +9
- Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.81.1.rt7.422.el8_10, kernel-rt-core-4.18.0-553.81.1.rt7.422.el8_10, kernel-rt-debug-4.18.0-553.81.1.rt7.422.el8_10 +7
Fixes 6 records
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free window by correcting the buffer release sequence in the deferred r…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00481 · Published 2025-09-19 · Partial fix · 5.4.299, 5.10.243 +6 CWE-787
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix user-after-free This uses l2cap_chan_hold_unless_zero() after calling __l2cap_get_chan_blah() to prevent the following trace: Blue…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00369 · Published 2025-09-18 · Partial fix · 4.9.331, 4.14.296 +7 CWE-416
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memor…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00222 · Published 2025-09-19 · Partial fix · 6.1.151, 6.3 +4 CWE-787
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_sc…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00222 · Published 2025-09-16 · Partial fix · 4.14.316, 4.19.284 +7
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk"…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00154 · Published 2025-09-18 · Partial fix · 5.10.195, 5.15.132 +4 CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00167 · Published 2025-09-16 · Partial fix · 3.9, 5.4.298 +7 CWE-125