Red Hat Security Advisory

RHSA-2025:2525

kernel security update

Released 2025-03-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.8.8) kernel-tools-libs-devel-4.18.0-477.93.1.el8_8
Red Hat Enterprise Linux BaseOS EUS (v.8.8) bpftool-4.18.0-477.93.1.el8_8, kernel-4.18.0-477.93.1.el8_8, kernel-abi-stablelists-4.18.0-477.93.1.el8_8 +19

Fixes 4 records

TI-2024-35666 CVE-2024-53197 · GHSA-5244-qm9f-xx43

ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04117 Published 2024-12-27 Fixed in 4.19.325, 5.4.287 +7 CWE-787

TI-2024-33743 CVE-2024-50302 · GHSA-9qwc-r24c-26j3

HID: core: zero-initialize the report buffer

HIGH 82KEV

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during al…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00811 Published 2024-11-19 Partial fix · 3.11, 3.12 +8 CWE-908

TI-2023-29242 CVE-2023-52922 · GHSA-56gp-6mw9-wpfj

can: bcm: Fix UAF in bcm_proc_show()

LOW 36

In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcm_proc_show() BUG: KASAN: slab-use-after-free in bcm_proc_show+0x969/0xa80 Read of size 8 at addr ffff888155846230 by task cat/78…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00296 Published 2024-11-28 Partial fix · 4.14.322, 4.19.291 +6 CWE-416

TI-2024-33716 CVE-2024-50275 · GHSA-4grr-9vhg-g98w

arm64/sve: Discard stale CPU state when handling SVE traps

LOW 32

In the Linux kernel, the following vulnerability has been resolved: arm64/sve: Discard stale CPU state when handling SVE traps The logic for handling SVE traps manipulates saved FPSIMD/SVE state incorrectly, and a race w…

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.0024 Published 2024-11-19 Fixed in 5.15.174, 6.1.120 +3