Read the docs
Red Hat Security Advisory

RHSA-2025:4509

kernel security update

Released 2025-05-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 9 records

TI-2025-15877 CVE-2025-21927 · GHSA-p4qc-cp8p-44wh

nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()

Priority MEDIUM 44

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() nvme_tcp_recv_pdu() doesn't check the validity of the header length.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00621 Published 2025-04-01 Partial fix · 6.1.191, 6.6.160 +3 CWE-787
TI-2024-32021 CVE-2024-47745 · GHSA-qpxg-4f92-ww23

mm: call the security_mmap_file() LSM hook in remap_file_pages()

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain th…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00284 Published 2024-10-21 Partial fix · 3.17, 6.1.120 +4 CWE-670
TI-2024-23720 CVE-2024-35855 · GHSA-7rp6-2m4j-7w56

mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update The rule activity update delayed work periodically traverses the list of co…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00232 Published 2024-05-17 Partial fix · 5.4.275, 5.10.216 +5 CWE-416
TI-2024-17919 CVE-2024-27056 · GHSA-f487-f23r-hjx6

wifi: iwlwifi: mvm: ensure offloading TID queue exists

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: ensure offloading TID queue exists The resume code path assumes that the TX queue for the offloading TID has been configured.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00251 Published 2024-05-01 Partial fix · 6.1.132, 6.6.85 +2
TI-2021-22042 CVE-2021-47386 · GHSA-2wcp-6fq9-mcr6

hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field If driver read val value sufficient for (val & 0x08) && (!(val & 0…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00256 Published 2024-05-21 Partial fix · 5.4.151, 5.10.71 +2 CWE-476
TI-2024-29464 CVE-2024-43871 · GHSA-x2xj-658j-798f

devres: Fix memory leakage caused by driver API devm_free_percpu()

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory leakage when use driver API devm_free_percpu() to free memory al…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00239 Published 2024-08-21 Partial fix · 4.19.320, 5.4.282 +6 CWE-401
TI-2024-28311 CVE-2024-42322 · GHSA-4qjr-33fg-w8xw

ipvs: properly dereference pe in ip_vs_add_service

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: ipvs: properly dereference pe in ip_vs_add_service Use pe directly to resolve sparse warning: net/netfilter/ipvs/ip_vs_ctl.c:1471:27: warning: dereferen…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00227 Published 2024-08-17 Partial fix · 5.10.237, 5.15.181 +4
TI-2023-29129 CVE-2023-52803 · GHSA-v93c-228v-m7cm

SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RPC client pipefs dentries cleanup is in separated rpc_remove_pipedir() workqueue,which take…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00236 Published 2024-05-21 Partial fix · 4.19.318, 5.4.280 +6 CWE-416