Red Hat Security AdvisoryRHSA-2025:22405
kernel security update
Released 2025-12-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-611.11.1.el9_7, kernel-64k-debug-devel-matched-5.14.0-611.11.1.el9_7, kernel-64k-devel-5.14.0-611.11.1.el9_7 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-611.11.1.el9_7, kernel-64k-5.14.0-611.11.1.el9_7, kernel-64k-core-5.14.0-611.11.1.el9_7 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-611.11.1.el9_7, libperf-5.14.0-611.11.1.el9_7
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-611.11.1.el9_7, kernel-rt-64k-5.14.0-611.11.1.el9_7, kernel-rt-64k-core-5.14.0-611.11.1.el9_7 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-611.11.1.el9_7, kernel-rt-core-5.14.0-611.11.1.el9_7, kernel-rt-debug-5.14.0-611.11.1.el9_7 +9
Fixes 7 records
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the retu…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00406 · Published 2025-09-04 · Partial fix · 5.4.297, 5.10.241 +7 CWE-416
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in commit 776b3580178f ("cfg80211: track hidden SSID networks prop…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00235 · Published 2025-09-19 · Partial fix · 5.4.299, 5.10.243 +6 CWE-416
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-stru…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00163 · Published 2025-10-28 · Partial fix · 6.12.53, 6.17.3 +1
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00207 · Published 2025-10-01 · Partial fix · 6.12.46, 6.16.6 +1
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to fix possible UAFs caused by struct mgmt_pending being freed while still being processed like in the f…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00153 · Published 2025-10-15 · Partial fix · 6.6.140, 6.12.59 +2
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00165 · Published 2025-10-09 · Partial fix · 5.4.300, 5.10.245 +6
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: ice: ice_adapter: release xa entry on adapter allocation failure When ice_adapter_new() fails, the reserved XArray entry created by xa_insert() is not r…
CVSS — · EPSS 0.00213 · Published 2025-11-12 · Partial fix · 6.12.54, 6.17.4 +1
THREATIST.IORead the docs