Red Hat Security AdvisoryRHSA-2025:19104
kernel security update
Released 2025-10-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.96.1.el9_4, libperf-5.14.0-427.96.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.96.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.96.1.el9_4, kernel-64k-devel-5.14.0-427.96.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.96.1.el9_4, kernel-5.14.0-427.96.1.el9_4, kernel-64k-5.14.0-427.96.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.96.1.el9_4, kernel-rt-core-5.14.0-427.96.1.el9_4, kernel-rt-debug-5.14.0-427.96.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.96.1.el9_4, kernel-rt-core-5.14.0-427.96.1.el9_4, kernel-rt-debug-5.14.0-427.96.1.el9_4 +11
Fixes 6 records
Priority CRITICAL 100KEV
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - on…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03198 · Published 2025-09-05 · Fixed in 6.1.149, 6.6.103 +3 CWE-754
Priority MEDIUM 42
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tls_alert_recv due to its assumption that there is v…
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00348 · Published 2025-08-19 · Partial fix · 6.6.102, 6.12.42 +3
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock packet in the guest, only the virtqueue buffer size is validated…
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00167 · Published 2025-09-05 · Partial fix · 6.1.149, 6.6.103 +3 CWE-787
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EP_MAX_NESTS+1 links.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00185 · Published 2025-08-19 · Partial fix · 2.6.33, 2.6.34 +10 CWE-674
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00165 · Published 2025-09-18 · Partial fix · 4.14.308, 4.19.276 +6 CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00171 · Published 2025-08-19 · Partial fix · 5.10.248, 5.15.198 +6 CWE-125
THREATIST.IORead the docs