Red Hat Security AdvisoryRHSA-2025:22087
kernel-rt security update
Released 2025-11-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt-5.14.0-70.155.1.rt21.227.el9_0, kernel-rt-core-5.14.0-70.155.1.rt21.227.el9_0, kernel-rt-debug-5.14.0-70.155.1.rt21.227.el9_0 +9
- Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt-5.14.0-70.155.1.rt21.227.el9_0, kernel-rt-core-5.14.0-70.155.1.rt21.227.el9_0, kernel-rt-debug-5.14.0-70.155.1.rt21.227.el9_0 +7
Fixes 8 records
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_sc…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00222 · Published 2025-09-16 · Partial fix · 4.14.316, 4.19.284 +7
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding th…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.002 · Published 2025-09-04 · Partial fix · 5.4.297, 5.10.241 +7 CWE-787
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: cifs: fix oops during encryption When running xfstests against Azure the following oops occurred on an arm64 system Unable to handle kernel write to rea…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0011 · Published 2025-09-16 · Partial fix · 5.4.229, 5.10.163 +4
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00167 · Published 2025-09-16 · Partial fix · 3.9, 5.4.298 +7 CWE-125
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declare…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00179 · Published 2025-09-11 · Partial fix · 5.4.297, 5.10.241 +7 CWE-125
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a user…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2025-09-11 · Partial fix · 3.17, 4.5 +7
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device Currently, when mlx5_ib_get_hw_stats() is used for device (port_num = 0), there is a special ha…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00148 · Published 2025-09-18 · Partial fix · 5.15.87, 6.0.19 +2
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: ip6mr: Fix skb_under_panic in ip6mr_cache_report() skbuff: skb_under_panic: text:ffffffff88771f69 len:56 put:-4 head:ffff88805f86a800 data:ffff887f5f86a…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00194 · Published 2025-09-17 · Partial fix · 4.14.322, 4.19.291 +6