Red Hat Security AdvisoryRHSA-2025:19886
kernel security update
Released 2025-11-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.97.1.el9_4, libperf-5.14.0-427.97.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.97.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.97.1.el9_4, kernel-64k-devel-5.14.0-427.97.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.97.1.el9_4, kernel-5.14.0-427.97.1.el9_4, kernel-64k-5.14.0-427.97.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.97.1.el9_4, kernel-rt-core-5.14.0-427.97.1.el9_4, kernel-rt-debug-5.14.0-427.97.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.97.1.el9_4, kernel-rt-core-5.14.0-427.97.1.el9_4, kernel-rt-debug-5.14.0-427.97.1.el9_4 +11
Fixes 6 records
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function needs to check the minimal filehandle length before it can access the embedded fi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00206 · Published 2025-09-07 · Partial fix · 5.4.297, 5.10.241 +7
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as valid"), initialization would as…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00161 · Published 2025-09-16 · Partial fix · 4.14.326, 4.19.295 +11 CWE-787
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfs_mdt_destroy In alloc_inode, inode_init_always() could return -ENOMEM if security_inode_alloc() fails, which causes inode->i…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2025-09-17 · Partial fix · 4.9.331, 4.14.296 +7 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: mm: fix zswap writeback race condition The zswap writeback mechanism can cause a race condition resulting in memory corruption, where a swapped out page…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00121 · Published 2025-09-15 · Partial fix · 6.1.30, 6.3.4 +1 CWE-362
Priority LOW 21
In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when…
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00246 · Published 2024-09-13 · Partial fix · 5.4.283, 5.10.225 +5
Priority LOW 21
In the Linux kernel, the following vulnerability has been resolved: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() KCSAN found an issue in obj_stock_flush_required(): stock->cached_objcg can be re…
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00139 · Published 2025-09-18 · Partial fix · 6.1.45, 6.4.10 +1 CWE-476
THREATIST.IORead the docs