Read the docs
Red Hat Security Advisory

RHSA-2025:8248

kernel security update

Released 2025-05-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 12 records

Priority HIGH 69

In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the binding until socket destruction Preserve sockets bindings; this includes both resulting from an explicit bind() and those implicitly bo…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00891 Published 2025-02-27 Fixed in 5.10.235, 5.15.179 +5 CWE-416
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: net: ppp: Add bound checking for skb data on ppp_sync_txmung Ensure we have enough data in linear buffer from skb before accessing initial bytes.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00405 Published 2025-05-01 Partial fix · 5.4.293, 5.10.237 +7 CWE-125
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix fortify source warning while accessing Eth segment ------------[ cut here ]------------ memcpy: detected field-spanning write (size 56) o…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00265 Published 2024-04-17 Partial fix · 5.10.214, 5.15.153 +4 CWE-416
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() The put_device() calls rmi_release_function() which frees "fn" so the dereferenc…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00242 Published 2024-05-21 Partial fix · 4.19.299, 5.4.261 +6 CWE-416
Priority LOW 30

In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Fix resetting msg rx state after topology removal If the MST topology is removed during the reception of an MST down reply or MST up request…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00163 Published 2025-01-11 Partial fix · 6.1.120, 5.11 +5 CWE-362
Priority LOW 26

In the Linux kernel, the following vulnerability has been resolved: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak syzbot identified a kernel information leak vulnerability in do_sys_name_to_handle() and i…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00828 Published 2024-04-17 Partial fix · 4.19.311, 5.4.273 +7 CWE-908
Priority LOW 25

In the Linux kernel, the following vulnerability has been resolved: tun: limit printing rate when illegal packet received by tun dev vhost_worker will call tun call backs to receive packets.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00273 Published 2024-05-01 Partial fix · 4.19.313, 5.4.275 +6 CWE-770
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix null pointer access when abort scan During cancel scan we might use vif that weren't scanning.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00213 Published 2024-05-19 Fixed in 6.1.191, 6.6.27 +2 CWE-476
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of t…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00255 Published 2024-05-01 Partial fix · 4.19.312, 5.4.274 +7 CWE-908
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path syzbot reported that act_len in kalmia_send_init_packet() is uninitialized when passing i…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00253 Published 2024-05-21 Partial fix · 4.14.306, 4.19.273 +5 CWE-908
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid online resizing failures due to oversized flex bg When we online resize an ext4 filesystem with a oversized flexbg_size, mkfs.ext4 -F -G 671…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00243 Published 2024-03-26 Partial fix · 4.19.307, 5.4.269 +6 CWE-770
TI-2021-22146 CVE-2021-47495 · GHSA-rj64-24f8-r32g

usbnet: sanity check for maxpacket

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: usbnet: sanity check for maxpacket maxpacket of 0 makes no sense and oopses as we need to divide by it.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00213 Published 2024-05-22 Partial fix · 4.4.291, 4.9.289 +6 CWE-369