Red Hat Security Advisory

RHSA-2025:8348

kpatch-patch-4_18_0-305_120_1, kpatch-patch-4_18_0-305_138_1, kpatch-patch-4_18_0-305_145_1, and kpatch-patch-4_18_0-305_150_1 security update

Released 2025-06-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v.8.4) kpatch-patch-4_18_0-305_120_1-1-10.el8_4, kpatch-patch-4_18_0-305_138_1-1-6.el8_4, kpatch-patch-4_18_0-305_145_1-1-4.el8_4 +1

Fixes 2 records

TI-2025-15709 CVE-2025-21756 · GHSA-5828-2c94-235c

vsock: Keep the binding until socket destruction

HIGH 69

In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the binding until socket destruction Preserve sockets bindings; this includes both resulting from an explicit bind() and those implicitly bo…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00891 Published 2025-02-27 Fixed in 5.10.235, 5.15.179 +5 CWE-416

TI-2024-35611 CVE-2024-53141 · GHSA-9567-2gw8-p4p5

netfilter: ipset: add missing range check in bitmap_ip_uadt

LOW 36

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip an…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00396 Published 2024-12-06 Partial fix · 4.19.325, 5.4.287 +7