Red Hat Security Advisory

RHSA-2025:19930

kernel security update

Released 2025-11-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.62.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.62.1.el9_6, kernel-64k-devel-5.14.0-570.62.1.el9_6 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.62.1.el9_6, kernel-64k-5.14.0-570.62.1.el9_6, kernel-64k-core-5.14.0-570.62.1.el9_6 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.62.1.el9_6, libperf-5.14.0-570.62.1.el9_6
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.62.1.el9_6, kernel-rt-64k-5.14.0-570.62.1.el9_6, kernel-rt-64k-core-5.14.0-570.62.1.el9_6 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.62.1.el9_6, kernel-rt-core-5.14.0-570.62.1.el9_6, kernel-rt-debug-5.14.0-570.62.1.el9_6 +11

Fixes 3 records

TI-2024-24144 CVE-2024-36350 · GHSA-3q6p-m26m-f78r

A transient execution vulnerability in some AMD processors may allow an attacker to infer…

LOW 26

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00494 Published 2025-07-08 Partial fix · MilanPI 1.0.0.G + OS Updates, GenoaPI 1.0.0.E + OS Updates +16 CWE-1421

TI-2025-26970 CVE-2025-40300 · GHSA-x8qw-46ww-c957

x86/vmscape: Add conditional IBPB mitigation

LOW 25

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a user…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00378 Published 2025-09-11 Partial fix · 3.17, 4.5 +7

TI-2024-24149 CVE-2024-36357 · GHSA-76p2-wq47-mf7x

A transient execution vulnerability in some AMD processors may allow an attacker to infer…

LOW 25

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00357 Published 2025-07-08 Partial fix · MilanPI 1.0.0.G + OS Updates, GenoaPI 1.0.0.E + OS Updates +16 CWE-1421