Red Hat Security AdvisoryRHSA-2025:9079
kernel security update
Released 2025-06-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-55.17.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.17.1.el10_0, kernel-64k-devel-6.12.0-55.17.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-55.17.1.el10_0, kernel-64k-6.12.0-55.17.1.el10_0, kernel-64k-core-6.12.0-55.17.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-55.17.1.el10_0, libperf-6.12.0-55.17.1.el10_0
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-55.17.1.el10_0, kernel-rt-64k-6.12.0-55.17.1.el10_0, kernel-rt-64k-core-6.12.0-55.17.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-55.17.1.el10_0, kernel-rt-core-6.12.0-55.17.1.el10_0, kernel-rt-debug-6.12.0-55.17.1.el10_0 +11
Fixes 8 records
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 ("smb: client: allocate crypto only for primary server") and commit b0abc…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00501 · Published 2025-05-01 · Fixed in 6.1.191, 5.11 +6 CWE-416
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd After the hci sync command releases l2cap_conn, the hci receive data work queue referen…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00258 · Published 2025-04-01 · Partial fix · 5.18, 6.1.191 +4 CWE-416
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00271 · Published 2025-02-27 · Partial fix · 5.4.291, 5.10.235 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphy_work before freeing wiphy A wiphy_work can be queued from the moment the wiphy is allocated and initialized (i.e.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00213 · Published 2025-04-01 · Partial fix · 6.1.132, 6.6.84 +3 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in key_put() Once a key's reference count has been reduced to 0, the garbage collector thread may destroy it at any time and so key_put()…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.002 · Published 2025-03-31 · Partial fix · 6.12.21, 6.13.9 +1 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The issue was caused by dput(upper) being called before ovl_dentry_update_reval(…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00223 · Published 2025-03-27 · Partial fix · 5.10.247, 5.15.179 +7 CWE-416
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option User-provided mount parameter acdirmax of type u32 is intended to have an upper limit,…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00207 · Published 2025-04-01 · Partial fix · 5.15.180, 6.1.132 +4 CWE-190
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper li…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00207 · Published 2025-04-01 · Fixed in 5.15.180, 6.1.132 +4 CWE-190
THREATIST.IORead the docs