Red Hat Security AdvisoryRHSA-2025:4341
kernel security update
Released 2025-04-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-503.40.1.el9_5, libperf-5.14.0-503.40.1.el9_5
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-503.40.1.el9_5, kernel-64k-debug-devel-matched-5.14.0-503.40.1.el9_5, kernel-64k-devel-5.14.0-503.40.1.el9_5 +11
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.4.0-503.40.1.el9_5, kernel-5.14.0-503.40.1.el9_5, kernel-64k-5.14.0-503.40.1.el9_5 +30
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-503.40.1.el9_5, kernel-rt-core-5.14.0-503.40.1.el9_5, kernel-rt-debug-5.14.0-503.40.1.el9_5 +9
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-503.40.1.el9_5, kernel-rt-core-5.14.0-503.40.1.el9_5, kernel-rt-debug-5.14.0-503.40.1.el9_5 +11
Fixes 5 records
Priority MEDIUM 44
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() nvme_tcp_recv_pdu() doesn't check the validity of the header length.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00621 · Published 2025-04-01 · Partial fix · 6.1.191, 6.6.160 +3 CWE-787
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calculates size of memory block to move, so will cause OOB memory ac…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00248 · Published 2024-08-17 · Partial fix · 4.19.320, 5.4.282 +6 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: ELF: fix kernel.randomize_va_space double read ELF loader uses "randomize_va_space" twice.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00248 · Published 2024-09-27 · Partial fix · 6.1.110, 6.6.51 +2
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: bonding: fix null pointer deref in bond_ipsec_offload_ok We must check if there is an active slave before dereferencing the pointer.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00241 · Published 2024-09-04 · Partial fix · 5.10.225, 5.15.166 +4 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: ipvs: properly dereference pe in ip_vs_add_service Use pe directly to resolve sparse warning: net/netfilter/ipvs/ip_vs_ctl.c:1471:27: warning: dereferen…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00227 · Published 2024-08-17 · Partial fix · 5.10.237, 5.15.181 +4
THREATIST.IORead the docs