Red Hat Security AdvisoryRHSA-2025:7423
kernel security update
Released 2025-05-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.16.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.16.1.el9_6, kernel-64k-devel-5.14.0-570.16.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.16.1.el9_6, kernel-64k-5.14.0-570.16.1.el9_6, kernel-64k-core-5.14.0-570.16.1.el9_6 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.16.1.el9_6, libperf-5.14.0-570.16.1.el9_6
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.16.1.el9_6, kernel-rt-64k-5.14.0-570.16.1.el9_6, kernel-rt-64k-core-5.14.0-570.16.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.16.1.el9_6, kernel-rt-core-5.14.0-570.16.1.el9_6, kernel-rt-debug-5.14.0-570.16.1.el9_6 +11
Fixes 5 records
Priority MEDIUM 44
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() nvme_tcp_recv_pdu() doesn't check the validity of the header length.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00621 · Published 2025-04-01 · Partial fix · 6.1.191, 6.6.160 +3 CWE-787
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read The nvmem interface supports variable buffer sizes, while the regmap interface operates wi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2025-03-06 · Fixed in 5.4.291, 5.10.235 +6 CWE-787
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() When performing an iSCSI boot using IPv6, iscsistart still reads the /sys/firm…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00219 · Published 2025-04-02 · Partial fix · 5.4.292, 5.10.236 +6 CWE-125
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: socinfo: Avoid out of bounds read of serial number On MSM8916 devices, the serial number exposed in sysfs is constant and does not change acr…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0025 · Published 2025-02-27 · Fixed in 5.4.291, 5.10.235 +6 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc() in eventlog/acpi.c The following failure was reported on HPE ProLiant D320: [ 10.693310][ T1] tpm_tis STM0925:00: 2.0 TPM (devi…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00252 · Published 2025-02-27 · Partial fix · 5.10.235, 5.15.179 +5
THREATIST.IORead the docs