Red Hat Security AdvisoryRHSA-2025:4469
kernel security update
Released 2025-05-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.0) kernel-debug-devel-5.14.0-70.131.1.el9_0, kernel-debug-devel-matched-5.14.0-70.131.1.el9_0, kernel-devel-5.14.0-70.131.1.el9_0 +5
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) bpftool-5.14.0-70.131.1.el9_0, kernel-5.14.0-70.131.1.el9_0, kernel-abi-stablelists-5.14.0-70.131.1.el9_0 +14
Fixes 1 record
Priority MEDIUM 44
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() nvme_tcp_recv_pdu() doesn't check the validity of the header length.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00621 · Published 2025-04-01 · Partial fix · 6.1.191, 6.6.160 +3 CWE-787
