Red Hat Security AdvisoryRHSA-2025:21469
kernel security update
Released 2025-11-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-611.8.1.el9_7, kernel-64k-debug-devel-matched-5.14.0-611.8.1.el9_7, kernel-64k-devel-5.14.0-611.8.1.el9_7 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-611.8.1.el9_7, kernel-64k-5.14.0-611.8.1.el9_7, kernel-64k-core-5.14.0-611.8.1.el9_7 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-611.8.1.el9_7, libperf-5.14.0-611.8.1.el9_7
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-611.8.1.el9_7, kernel-rt-64k-5.14.0-611.8.1.el9_7, kernel-rt-64k-core-5.14.0-611.8.1.el9_7 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-611.8.1.el9_7, kernel-rt-core-5.14.0-611.8.1.el9_7, kernel-rt-debug-5.14.0-611.8.1.el9_7 +9
Fixes 9 records
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync This fixes the following UFA in hci_acl_create_conn_sync where a connection still pending is c…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00282 · Published 2025-10-15 · Partial fix · 6.1.155, 6.6.109 +3
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory conte…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00158 · Published 2025-10-15 · Partial fix · 5.4.300, 5.10.245 +6
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue This fixes the following UAF caused by not properly locking hdev when processing HCI_EV_NUM_COMP_PK…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00249 · Published 2025-10-15 · Partial fix · 6.16.10, 6.17
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_vc_config_que…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00158 · Published 2025-10-15 · Partial fix · 5.4.300, 5.10.245 +6
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry in io_waitid_wait() For a successful return, always remove our entry from the wait queue entry list.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00163 · Published 2025-10-28 · Partial fix · 6.12.53, 6.17.3 +1
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: kernfs: Fix UAF in polling when open file is released A use-after-free (UAF) vulnerability was identified in the PSI (Pressure Stall Information) monito…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00154 · Published 2025-09-23 · Fixed in 6.1.153, 6.6.107 +3 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfs_lock_and_join_requests() tests for whether the request is still attached to the mapping, nothi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00159 · Published 2025-09-05 · Partial fix · 5.10.242, 5.15.191 +5 CWE-362
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00219 · Published 2025-07-30 · Partial fix · 5.4.295, 5.10.239 +6
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALL_FLUSH_VIRTUAL_AD…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2025-07-19 · Fixed in 6.6.103, 6.12.41 +2
THREATIST.IORead the docs