Red Hat Security AdvisoryRHSA-2025:9348
kernel security update
Released 2025-06-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-55.18.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.18.1.el10_0, kernel-64k-devel-6.12.0-55.18.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-55.18.1.el10_0, kernel-64k-6.12.0-55.18.1.el10_0, kernel-64k-core-6.12.0-55.18.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-55.18.1.el10_0, libperf-6.12.0-55.18.1.el10_0
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-55.18.1.el10_0, kernel-rt-64k-6.12.0-55.18.1.el10_0, kernel-rt-64k-core-6.12.0-55.18.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-55.18.1.el10_0, kernel-rt-core-6.12.0-55.18.1.el10_0, kernel-rt-debug-6.12.0-55.18.1.el10_0 +11
Fixes 4 records
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00233 · Published 2025-04-03 · Partial fix · 5.10.236, 5.15.180 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: sched/rt: Fix race in push_rt_task Overview ======== When a CPU chooses to call push_rt_task and picks a task to push to another CPU's runqueue then it…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00172 · Published 2025-07-04 · Partial fix · 6.1.191, 6.6.124 +3 CWE-362
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00216 · Published 2025-05-01 · Partial fix · 5.4.293, 5.10.237 +7 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller detected a use-after-free issue in ext4_insert_dentry that was caused by out-of-bounds access due to in…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00232 · Published 2025-05-01 · Partial fix · 5.4.293, 4.5 +13 CWE-193
THREATIST.IORead the docs