Red Hat Security AdvisoryRHSA-2025:7526
kernel security update
Released 2025-05-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.68.1.el9_4, libperf-5.14.0-427.68.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.68.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.68.1.el9_4, kernel-64k-devel-5.14.0-427.68.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.68.1.el9_4, kernel-5.14.0-427.68.1.el9_4, kernel-64k-5.14.0-427.68.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.68.1.el9_4, kernel-rt-core-5.14.0-427.68.1.el9_4, kernel-rt-debug-5.14.0-427.68.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.68.1.el9_4, kernel-rt-core-5.14.0-427.68.1.el9_4, kernel-rt-debug-5.14.0-427.68.1.el9_4 +11
Fixes 10 records
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip an…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00396 · Published 2024-12-06 · Partial fix · 4.19.325, 5.4.287 +7
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix use-after-free in free_irq() From commit a304e1b82808 ("[PATCH] Debug shared irqs"), there is a test to make sure the shared ir…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0023 · Published 2024-04-17 · Fixed in 6.3, 6.4 +4 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() Fix an array-index-out-of-bounds read in ath9k_htc_txstatus().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00248 · Published 2024-03-06 · Partial fix · 4.19.307, 5.4.269 +6 CWE-129
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() If we need to increase the tree depth, allocate a new node, and then race with another…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2024-10-09 · Fixed in 5.4.284, 5.10.226 +5 CWE-362
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefiles_add_cache() The following memory leak was reported after unbinding /dev/cachefiles: ==========================…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2024-04-17 · Partial fix · 4.19.309, 5.4.271 +6 CWE-401
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix hungtask for PADATA_RESET We found a hungtask bug in test_aead_vec_cfg as follows: INFO: task cryptomgr_test:391009 blocked for mor…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00286 · Published 2024-05-21 · Partial fix · 4.14.331, 4.19.300 +7
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: rfi: fix potential response leaks If the rx payload length check fails, or if kmemdup() fails, we still need to free the command res…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00209 · Published 2024-05-19 · Partial fix · 5.15.154, 6.1.85 +3 CWE-401
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: fix VM_PAT handling in COW mappings PAT handling won't do the right thing in COW mappings: the first PTE (or, in fact, all PTEs) can be repl…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00254 · Published 2024-05-19 · Partial fix · 4.19.312, 5.4.274 +6 CWE-401
Priority LOW 24
A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhos…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00235 · Published 2024-01-09 · Partial fix · 6.4-rc6, 4.18.0-553.5.1.rt7.346.el8_10 +3 CWE-200
Priority LOW 20
In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix NULL pointer in channel unregistration function __dma_async_device_channel_register() can fail.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00271 · Published 2024-02-29 · Partial fix · 5.10.210, 5.15.149 +4 CWE-476
THREATIST.IORead the docs