Read the docs
Red Hat Security Advisory

RHSA-2025:3021

kernel security update

Released 2025-03-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 5 records

TI-2024-23700 CVE-2024-35835 · GHSA-8wgh-w2f4-v692

net/mlx5e: fix a double-free in arfs_create_groups

Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfs_create_groups When `in` allocated by kvzalloc fails, arfs_create_groups will free ft->g and return an error.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00628 Published 2024-05-17 Partial fix · 4.19.307, 5.4.269 +6 CWE-415
TI-2024-29484 CVE-2024-43892 · GHSA-hxw3-49vc-4rrp

memcg: protect concurrent access to mem_cgroup_idr

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to mem_cgroup_idr Commit 73f576c04b94 ("mm: memcontrol: fix cgroup creation failure after many small jobs") decoupled t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00247 Published 2024-08-26 Partial fix · 4.5, 4.7 +6
TI-2024-17743 CVE-2024-26872 · GHSA-xqvp-j58f-pjf5

RDMA/srpt: Do not register event handler until srpt device is fully setup

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occasions, KASAN reports a use-after-free Write in srpt_refresh_port…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0024 Published 2024-04-17 Partial fix · 5.10.214, 5.15.153 +5 CWE-416
TI-2024-23676 CVE-2024-35809 · GHSA-3r3f-7rrr-c2h9

PCI/PM: Drain runtime-idle callbacks before driver removal

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the .runtime_idle() callback and the .remove() callback in the rtsx_…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00195 Published 2024-05-17 Partial fix · 4.19.312, 5.4.274 +7 CWE-362
TI-2024-17879 CVE-2024-27014 · GHSA-gj8m-4ccw-v82h

net/mlx5e: Prevent deadlock while disabling aRFS

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent deadlock while disabling aRFS When disabling aRFS under the `priv->state_lock`, any scheduled aRFS works are canceled using the `canc…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00176 Published 2024-05-01 Partial fix · 6.1.88, 6.6.29 +2 CWE-667