Red Hat Security AdvisoryRHSA-2025:3510
kernel security update
Released 2025-04-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.62.1.el9_4, libperf-5.14.0-427.62.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.62.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.62.1.el9_4, kernel-64k-devel-5.14.0-427.62.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.62.1.el9_4, kernel-5.14.0-427.62.1.el9_4, kernel-64k-5.14.0-427.62.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.62.1.el9_4, kernel-rt-core-5.14.0-427.62.1.el9_4, kernel-rt-debug-5.14.0-427.62.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.62.1.el9_4, kernel-rt-core-5.14.0-427.62.1.el9_4, kernel-rt-debug-5.14.0-427.62.1.el9_4 +11
Fixes 10 records
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopback communication, a dangling pointer can be created in vsk->tr…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00353 · Published 2024-11-19 · Partial fix · 4.19.324, 5.4.286 +6 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: KVM: Always flush async #PF workqueue when vCPU is being destroyed Always flush the per-vCPU async #PF workqueue when a vCPU is clearing its completion…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2024-05-01 · Partial fix · 4.19.312, 5.4.274 +7 CWE-400
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix the lifetime of the bo cursor memory The cleanup can be dispatched while the atomic update is still active, which means that the memory…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00236 · Published 2024-05-17 · Partial fix · 6.6.24, 6.7.12 +2
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject iftype change with mesh ID change It's currently possible to change the mesh ID when the interface isn't yet in mesh mode, at the…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00257 · Published 2024-05-17 · Partial fix · 5.20, 6.1.81 +3
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspan_base_hdr is present in skb->head syzbot reported a problem in ip6erspan_rcv() [1] Issue is that ip6erspan_rcv() (and erspan_rcv…
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00606 · Published 2024-05-19 · Partial fix · 4.19.312, 4.21 +7 CWE-908
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state There are several problems with the way hyp code lazily saves the host's FPSIMD/SVE sta…
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00216 · Published 2025-04-08 · Partial fix · 6.6.85, 6.12.21 +2
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix a memleak in gss_import_v2_context The ctx->mech_used.data allocated by kmemdup is not freed in neither gss_import_v2_context nor it only ca…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00275 · Published 2024-05-01 · Partial fix · 6.1.191, 6.6.23 +3 CWE-401
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: block: prevent division by zero in blk_rq_stat_sum() The expression dst->nr_samples + src->nr_samples may have zero value on overflow.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00227 · Published 2024-05-19 · Partial fix · 4.19.312, 5.4.274 +6 CWE-369
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix mirred deadlock on device recursion When the mirred action is used on a classful egress qdisc and a packet is mirrored or redirected to s…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00176 · Published 2024-05-01 · Partial fix · 6.1.191, 6.6.156 +2 CWE-667
Priority LOW 24
In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00254 · Published 2024-01-23 · Fixed CWE-416
THREATIST.IORead the docs