Red Hat Security Advisory

RHSA-2025:4339

kernel security update

Released 2025-04-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.2) kernel-tools-libs-devel-5.14.0-284.115.1.el9_2
Red Hat Enterprise Linux AppStream EUS (v.9.2) kernel-64k-debug-devel-5.14.0-284.115.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.115.1.el9_2, kernel-64k-devel-5.14.0-284.115.1.el9_2 +10
Red Hat Enterprise Linux BaseOS EUS (v.9.2) bpftool-7.0.0-284.115.1.el9_2, kernel-5.14.0-284.115.1.el9_2, kernel-64k-5.14.0-284.115.1.el9_2 +29

Fixes 1 record

TI-2025-15877 CVE-2025-21927 · GHSA-p4qc-cp8p-44wh

nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()

MEDIUM 44

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() nvme_tcp_recv_pdu() doesn't check the validity of the header length.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00621 Published 2025-04-01 Partial fix · 6.1.191, 6.6.160 +3 CWE-787