Red Hat Security AdvisoryRHSA-2025:8248
kernel security update
Released 2025-05-28 · Red Hat rating Important · View on Red Hat →
Fixes 12 records
Priority HIGH 69
In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the binding until socket destruction Preserve sockets bindings; this includes both resulting from an explicit bind() and those implicitly bo…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00891 · Published 2025-02-27 · Fixed in 5.10.235, 5.15.179 +5 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: net: ppp: Add bound checking for skb data on ppp_sync_txmung Ensure we have enough data in linear buffer from skb before accessing initial bytes.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00405 · Published 2025-05-01 · Partial fix · 5.4.293, 5.10.237 +7 CWE-125
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix fortify source warning while accessing Eth segment ------------[ cut here ]------------ memcpy: detected field-spanning write (size 56) o…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00265 · Published 2024-04-17 · Partial fix · 5.10.214, 5.15.153 +4 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() The put_device() calls rmi_release_function() which frees "fn" so the dereferenc…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00242 · Published 2024-05-21 · Partial fix · 4.19.299, 5.4.261 +6 CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Fix resetting msg rx state after topology removal If the MST topology is removed during the reception of an MST down reply or MST up request…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00163 · Published 2025-01-11 · Partial fix · 6.1.120, 5.11 +5 CWE-362
Priority LOW 26
In the Linux kernel, the following vulnerability has been resolved: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak syzbot identified a kernel information leak vulnerability in do_sys_name_to_handle() and i…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00828 · Published 2024-04-17 · Partial fix · 4.19.311, 5.4.273 +7 CWE-908
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: tun: limit printing rate when illegal packet received by tun dev vhost_worker will call tun call backs to receive packets.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2024-05-01 · Partial fix · 4.19.313, 5.4.275 +6 CWE-770
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix null pointer access when abort scan During cancel scan we might use vif that weren't scanning.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00213 · Published 2024-05-19 · Fixed in 6.1.191, 6.6.27 +2 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of t…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00255 · Published 2024-05-01 · Partial fix · 4.19.312, 5.4.274 +7 CWE-908
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path syzbot reported that act_len in kalmia_send_init_packet() is uninitialized when passing i…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00253 · Published 2024-05-21 · Partial fix · 4.14.306, 4.19.273 +5 CWE-908
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid online resizing failures due to oversized flex bg When we online resize an ext4 filesystem with a oversized flexbg_size, mkfs.ext4 -F -G 671…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00243 · Published 2024-03-26 · Partial fix · 4.19.307, 5.4.269 +6 CWE-770
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: usbnet: sanity check for maxpacket maxpacket of 0 makes no sense and oopses as we need to divide by it.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00213 · Published 2024-05-22 · Partial fix · 4.4.291, 4.9.289 +6 CWE-369