Red Hat Security Advisory

RHSA-2025:8346

kpatch-patch-4_18_0-477_43_1, kpatch-patch-4_18_0-477_67_1, kpatch-patch-4_18_0-477_81_1, and kpatch-patch-4_18_0-477_89_1 security update

Released 2025-06-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.8.8) kpatch-patch-4_18_0-477_43_1-1-9.el8_8, kpatch-patch-4_18_0-477_67_1-1-6.el8_8, kpatch-patch-4_18_0-477_81_1-1-4.el8_8 +1

Fixes 2 records

TI-2025-15709 CVE-2025-21756 · GHSA-5828-2c94-235c

vsock: Keep the binding until socket destruction

HIGH 69

In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the binding until socket destruction Preserve sockets bindings; this includes both resulting from an explicit bind() and those implicitly bo…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00891 Published 2025-02-27 Fixed in 5.10.235, 5.15.179 +5 CWE-416

TI-2024-35611 CVE-2024-53141 · GHSA-9567-2gw8-p4p5

netfilter: ipset: add missing range check in bitmap_ip_uadt

LOW 36

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip an…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00396 Published 2024-12-06 Partial fix · 4.19.325, 5.4.287 +7