Red Hat Security AdvisoryRHSA-2025:8333
kernel security update
Released 2025-06-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.19.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.19.1.el9_6, kernel-64k-devel-5.14.0-570.19.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.19.1.el9_6, kernel-64k-5.14.0-570.19.1.el9_6, kernel-64k-core-5.14.0-570.19.1.el9_6 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.19.1.el9_6, libperf-5.14.0-570.19.1.el9_6
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.19.1.el9_6, kernel-rt-64k-5.14.0-570.19.1.el9_6, kernel-rt-64k-core-5.14.0-570.19.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.19.1.el9_6, kernel-rt-core-5.14.0-570.19.1.el9_6, kernel-rt-debug-5.14.0-570.19.1.el9_6 +11
Fixes 2 records
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00271 · Published 2025-02-27 · Partial fix · 5.4.291, 5.10.235 +6 CWE-416
Priority LOW 36
A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0024 · Published 2023-03-06 · Partial fix CWE-416
