Red Hat Security Advisory

RHSA-2025:7903

kernel security update

Released 2025-05-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.17.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.17.1.el9_6, kernel-64k-devel-5.14.0-570.17.1.el9_6 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.17.1.el9_6, kernel-64k-5.14.0-570.17.1.el9_6, kernel-64k-core-5.14.0-570.17.1.el9_6 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.17.1.el9_6, libperf-5.14.0-570.17.1.el9_6
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.17.1.el9_6, kernel-rt-64k-5.14.0-570.17.1.el9_6, kernel-rt-64k-core-5.14.0-570.17.1.el9_6 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.17.1.el9_6, kernel-rt-core-5.14.0-570.17.1.el9_6, kernel-rt-debug-5.14.0-570.17.1.el9_6 +11

Fixes 3 records

TI-2025-15709 CVE-2025-21756 · GHSA-5828-2c94-235c

vsock: Keep the binding until socket destruction

HIGH 69

In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the binding until socket destruction Preserve sockets bindings; this includes both resulting from an explicit bind() and those implicitly bo…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00891 Published 2025-02-27 Fixed in 5.10.235, 5.15.179 +5 CWE-416

TI-2025-25103 CVE-2025-37749 · GHSA-v3g9-9rfh-r7cr

net: ppp: Add bound checking for skb data on ppp_sync_txmung

LOW 36

In the Linux kernel, the following vulnerability has been resolved: net: ppp: Add bound checking for skb data on ppp_sync_txmung Ensure we have enough data in linear buffer from skb before accessing initial bytes.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00405 Published 2025-05-01 Partial fix · 5.4.293, 5.10.237 +7 CWE-125

TI-2025-15916 CVE-2025-21966 · GHSA-w66x-hqgr-vfg4

dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature

LOW 35

In the Linux kernel, the following vulnerability has been resolved: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature Fix memory corruption due to incorrect parameter being passed to bio_init

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00212 Published 2025-04-01 Partial fix · 6.6.84, 6.12.20 +2 CWE-787