Read the docs
Red Hat Security Advisory

RHSA-2025:22087

kernel-rt security update

Released 2025-11-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 8 records

Priority LOW 37

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_sc…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00222 Published 2025-09-16 Partial fix · 4.14.316, 4.19.284 +7
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding th…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.002 Published 2025-09-04 Partial fix · 5.4.297, 5.10.241 +7 CWE-787
TI-2022-25824 CVE-2022-50341 · GHSA-frfp-g383-4xwm

cifs: fix oops during encryption

Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: cifs: fix oops during encryption When running xfstests against Azure the following oops occurred on an arm64 system Unable to handle kernel write to rea…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0011 Published 2025-09-16 Partial fix · 5.4.229, 5.10.163 +4
Priority LOW 30

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00167 Published 2025-09-16 Partial fix · 3.9, 5.4.298 +7 CWE-125
Priority LOW 30

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declare…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00179 Published 2025-09-11 Partial fix · 5.4.297, 5.10.241 +7 CWE-125
TI-2025-26970 CVE-2025-40300 · GHSA-x8qw-46ww-c957

x86/vmscape: Add conditional IBPB mitigation

Priority LOW 25

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a user…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00378 Published 2025-09-11 Partial fix · 3.17, 4.5 +7
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device Currently, when mlx5_ib_get_hw_stats() is used for device (port_num = 0), there is a special ha…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00148 Published 2025-09-18 Partial fix · 5.15.87, 6.0.19 +2
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: ip6mr: Fix skb_under_panic in ip6mr_cache_report() skbuff: skb_under_panic: text:ffffffff88771f69 len:56 put:-4 head:ffff88805f86a800 data:ffff887f5f86a…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00194 Published 2025-09-17 Partial fix · 4.14.322, 4.19.291 +6