Red Hat Security AdvisoryRHSA-2025:2627
kernel security update
Released 2025-03-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-503.31.1.el9_5, libperf-5.14.0-503.31.1.el9_5
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-503.31.1.el9_5, kernel-64k-debug-devel-matched-5.14.0-503.31.1.el9_5, kernel-64k-devel-5.14.0-503.31.1.el9_5 +11
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.4.0-503.31.1.el9_5, kernel-5.14.0-503.31.1.el9_5, kernel-64k-5.14.0-503.31.1.el9_5 +30
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-503.31.1.el9_5, kernel-rt-core-5.14.0-503.31.1.el9_5, kernel-rt-debug-5.14.0-503.31.1.el9_5 +9
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-503.31.1.el9_5, kernel-rt-core-5.14.0-503.31.1.el9_5, kernel-rt-debug-5.14.0-503.31.1.el9_5 +11
Fixes 5 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.04117 · Published 2024-12-27 · Fixed in 4.19.325, 5.4.287 +7 CWE-787
Priority HIGH 82KEV
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during al…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00811 · Published 2024-11-19 · Partial fix · 3.11, 3.12 +8 CWE-908
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopback communication, a dangling pointer can be created in vsk->tr…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00353 · Published 2024-11-19 · Partial fix · 4.19.324, 5.4.286 +6 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcm_proc_show() BUG: KASAN: slab-use-after-free in bcm_proc_show+0x969/0xa80 Read of size 8 at addr ffff888155846230 by task cat/78…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00296 · Published 2024-11-28 · Partial fix · 4.14.322, 4.19.291 +6 CWE-416
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof We triggered a NULL pointer dereference for ac.preferred_zoneref->zone in alloc_pages_bulk_n…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00249 · Published 2024-12-02 · Partial fix · 5.15.174, 6.1.119 +3 CWE-476
THREATIST.IORead the docs