Red Hat Security AdvisoryRHSA-2025:2490
kernel security update
Released 2025-03-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.59.1.el9_4, libperf-5.14.0-427.59.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.59.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.59.1.el9_4, kernel-64k-devel-5.14.0-427.59.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.59.1.el9_4, kernel-5.14.0-427.59.1.el9_4, kernel-64k-5.14.0-427.59.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.59.1.el9_4, kernel-rt-core-5.14.0-427.59.1.el9_4, kernel-rt-debug-5.14.0-427.59.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.59.1.el9_4, kernel-rt-core-5.14.0-427.59.1.el9_4, kernel-rt-debug-5.14.0-427.59.1.el9_4 +11
Fixes 10 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.04117 · Published 2024-12-27 · Fixed in 4.19.325, 5.4.287 +7 CWE-787
Priority HIGH 82KEV
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during al…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00811 · Published 2024-11-19 · Partial fix · 3.11, 3.12 +8 CWE-908
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD Commit 672365477ae8 ("x86/fpu: Update XFD state where required") and commit 8bf26758ca96 ("x86/fpu: Ad…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00235 · Published 2024-05-17 · Fixed in 6.1.84, 6.6.24 +3 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcm_proc_show() BUG: KASAN: slab-use-after-free in bcm_proc_show+0x969/0xa80 Read of size 8 at addr ffff888155846230 by task cat/78…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00296 · Published 2024-11-28 · Partial fix · 4.14.322, 4.19.291 +6 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate() Triggers which have trigger specific sysfs attributes typically store related dat…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00251 · Published 2024-08-17 · Partial fix · 4.19.320, 5.4.282 +6 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells If a cell has 'nbits' equal to a multiple of BITS_PER_BYTE the logic *p &= GENMASK((cell->nbi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00221 · Published 2024-05-22 · Partial fix · 4.4.290, 4.9.288 +6 CWE-787
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Stop relying on userspace for info to fault in xsave buffer Before this change, the expected size of the user space buffer was taken from fx_sw…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00278 · Published 2024-02-24 · Fixed in 5.15.150, 6.1.79 +3 CWE-835
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srpt_service_guid parameter Make loading ib_srpt with this parameter set work.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00255 · Published 2024-04-03 · Partial fix · 4.19.308, 5.4.293 +6 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: hwrng: core - Fix page fault dead lock on mmap-ed hwrng There is a dead-lock in the hwrng device read path.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00195 · Published 2024-03-18 · Partial fix · 4.19.307, 5.4.269 +6 CWE-667
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix reference leak If a duplicate attribute is found using kset_find_obj(), a reference to that attribute is returned which nee…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00241 · Published 2024-03-02 · Fixed in 5.15.136, 6.1.59 +2
THREATIST.IORead the docs