Red Hat Security AdvisoryRHSA-2025:4342
kernel security update
Released 2025-04-30 · Red Hat rating Moderate · View on Red Hat →
Fixes 11 records
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dma_set_decrypted() failure On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypt…
CVSS 3.1CRITICAL 9.3· Local · No auth · No interaction · EPSS 0.00222 · Published 2024-05-19 · Fixed in 5.8, 6.1.86 +3
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bounds issues caused by sprintf by replacing it with snprintf for safer data copying, e…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2024-08-17 · Partial fix · 4.19.320, 5.4.282 +6 CWE-129
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/mes: fix use-after-free issue Delete fence fallback timer to fix the ramdom use-after-free issue.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0023 · Published 2024-06-19 · Partial fix · 6.1.93, 6.6.33 +2 CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00728 · Published 2024-05-17 · Partial fix · 5.4.275, 5.10.216 +5 CWE-401
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register store validation for NFT_DATA_VALUE is conditional, however, the…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00282 · Published 2024-07-29 · Partial fix · 4.19.317, 5.4.279 +6 CWE-401
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue Issue reported by customer during SRIOV testing, call trace: When both i40e and the i40iw driver are…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00246 · Published 2024-05-20 · Partial fix · 4.19.313, 5.4.275 +6
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() Syzkaller hit 'WARNING in dg_dispatch_as_host' bug.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2024-05-19 · Partial fix · 4.19.312, 5.4.274 +6
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: Fix qedr_create_user_qp error flow Avoid the following warning by making sure to free the allocated resources in case that qedr_init_user_que…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00242 · Published 2024-04-03 · Partial fix · 5.10.211, 5.15.150 +4 CWE-770
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds If the "struct can_priv::echoo_skb" is accessed out of…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00236 · Published 2024-05-21 · Partial fix · 5.15.139, 6.1.63 +3 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the following uninit-value access issue: ============================…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00243 · Published 2024-03-02 · Partial fix · 4.14.327, 4.19.296 +6 CWE-908
Priority LOW 20
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values syzbot is able to trigger softlockups, setting NL80211_ATTR_TXQ_QUANTUM to 2^31.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00176 · Published 2024-07-30 · Partial fix · 5.10.224, 5.15.165 +4 CWE-667