Red Hat Security AdvisoryRHSA-2025:22854
kernel security update
Released 2025-12-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-124.20.1.el10_1, kernel-64k-debug-devel-matched-6.12.0-124.20.1.el10_1, kernel-64k-devel-6.12.0-124.20.1.el10_1 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-124.20.1.el10_1, kernel-64k-6.12.0-124.20.1.el10_1, kernel-64k-core-6.12.0-124.20.1.el10_1 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-124.20.1.el10_1, libperf-6.12.0-124.20.1.el10_1
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-124.20.1.el10_1, kernel-rt-64k-6.12.0-124.20.1.el10_1, kernel-rt-64k-core-6.12.0-124.20.1.el10_1 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-124.20.1.el10_1, kernel-rt-core-6.12.0-124.20.1.el10_1, kernel-rt-debug-6.12.0-124.20.1.el10_1 +9
Fixes 9 records
Priority MEDIUM 42
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as net…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00391 · Published 2025-09-05 · Fixed in 6.12.44, 6.16.4 +1 CWE-908
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync This fixes the following UFA in hci_acl_create_conn_sync where a connection still pending is c…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00282 · Published 2025-10-15 · Partial fix · 6.1.155, 6.6.109 +3
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue This fixes the following UAF caused by not properly locking hdev when processing HCI_EV_NUM_COMP_PK…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00249 · Published 2025-10-15 · Partial fix · 6.16.10, 6.17
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-stru…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00163 · Published 2025-10-28 · Partial fix · 6.12.53, 6.17.3 +1
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to fix possible UAFs caused by struct mgmt_pending being freed while still being processed like in the f…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00153 · Published 2025-10-15 · Partial fix · 6.6.140, 6.12.59 +2
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, fix UAF in flow counter release Fix a kernel trace [1] caused by releasing an HWS action of a local flow counter in mlx5_cmd_hws_delete_ft…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00147 · Published 2025-10-15 · Partial fix · 6.16.10, 6.17
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry in io_waitid_wait() For a successful return, always remove our entry from the wait queue entry list.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00163 · Published 2025-10-28 · Partial fix · 6.12.53, 6.17.3 +1
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: can: j1939: implement NETDEV_UNREGISTER notification handler syzbot is reporting unregister_netdevice: waiting for vcan0 to become free.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0015 · Published 2025-10-01 · Partial fix · 5.15.220, 6.1.187 +4
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: ice: ice_adapter: release xa entry on adapter allocation failure When ice_adapter_new() fails, the reserved XArray entry created by xa_insert() is not r…
CVSS — · EPSS 0.00213 · Published 2025-11-12 · Partial fix · 6.12.54, 6.17.4 +1
THREATIST.IORead the docs