Red Hat Security AdvisoryRHSA-2025:23450
kernel security update
Released 2025-12-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.103.1.el9_4, libperf-5.14.0-427.103.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.103.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.103.1.el9_4, kernel-64k-devel-5.14.0-427.103.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.103.1.el9_4, kernel-5.14.0-427.103.1.el9_4, kernel-64k-5.14.0-427.103.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.103.1.el9_4, kernel-rt-core-5.14.0-427.103.1.el9_4, kernel-rt-debug-5.14.0-427.103.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.103.1.el9_4, kernel-rt-core-5.14.0-427.103.1.el9_4, kernel-rt-debug-5.14.0-427.103.1.el9_4 +11
Fixes 3 records
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in commit 776b3580178f ("cfg80211: track hidden SSID networks prop…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00235 · Published 2025-09-19 · Partial fix · 5.4.299, 5.10.243 +6 CWE-416
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00585 · Published 2025-11-12 · Partial fix · 5.4.301, 5.10.246 +7
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00165 · Published 2025-10-09 · Partial fix · 5.4.300, 5.10.245 +6
