Red Hat Security Advisory

RHSA-2025:8796

kernel security update

Released 2025-06-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.72.1.el9_4, libperf-5.14.0-427.72.1.el9_4
Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.72.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.72.1.el9_4, kernel-64k-devel-5.14.0-427.72.1.el9_4 +11
Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.72.1.el9_4, kernel-5.14.0-427.72.1.el9_4, kernel-64k-5.14.0-427.72.1.el9_4 +29
Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.72.1.el9_4, kernel-rt-core-5.14.0-427.72.1.el9_4, kernel-rt-debug-5.14.0-427.72.1.el9_4 +9
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.72.1.el9_4, kernel-rt-core-5.14.0-427.72.1.el9_4, kernel-rt-debug-5.14.0-427.72.1.el9_4 +11

Fixes 6 records

TI-2024-17789 CVE-2024-26921 · GHSA-4vg2-58j7-gmw7

inet: inet_defrag: prevent sk release while still in use

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: inet: inet_defrag: prevent sk release while still in use ip_local_out() and other functions can pass skb->sk as function argument.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00399 Published 2024-04-18 Partial fix · 5.4.285, 5.10.227 +5

TI-2024-24481 CVE-2024-36933

nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().

LOW 34

In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00295 Published 2024-05-30 Fixed in 4.19.314, 5.4.276 +6 CWE-908

TI-2023-28945 CVE-2023-52606 · GHSA-vcwv-jw38-8hqp

powerpc/lib: Validate size for vector operations

LOW 34

In the Linux kernel, the following vulnerability has been resolved: powerpc/lib: Validate size for vector operations Some of the fp/vmx code in sstep.c assume a certain maximum size for the instructions being emulated.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00245 Published 2024-03-06 Partial fix · 4.19.307, 5.4.269 +6 CWE-770

TI-2024-23789 CVE-2024-35930 · GHSA-xwxp-fcpw-w82j

scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()

LOW 24

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() The call to lpfc_sli4_resume_rpi() in lpfc_rcv_padisc() may return an unsuccessful status.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00225 Published 2024-05-19 Partial fix · 4.19.312, 5.4.274 +6 CWE-401

TI-2024-17525 CVE-2024-26645 · GHSA-hwc8-wrmm-ch4w

tracing: Ensure visibility when inserting an element into tracing_map

LOW 24

In the Linux kernel, the following vulnerability has been resolved: tracing: Ensure visibility when inserting an element into tracing_map Running the following two commands in parallel on a multi-processor AArch64 machin…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00242 Published 2024-03-26 Fixed in 4.19.307, 5.4.269 +6

TI-2023-30392 CVE-2023-54114 · GHSA-g58j-c94r-957c

net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()

LOW 22

In the Linux kernel, the following vulnerability has been resolved: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() As the call trace shows, skb_panic was caused by wrong skb->mac_header in nsh_gs…

CVSS — EPSS 0.00219 Published 2025-12-24 Partial fix · 4.14.316, 4.19.284 +6