The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CVE-2025-21966)
* kernel: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CVE-2025-21993)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: netfilter: ipset: add missing range check in bitmap_ip_uadt (CVE-2024-53141)
* kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: mm: call the security_mmap_file() LSM hook in remap_file_pages() (CVE-2024-47745)
* kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat has released an important security update for the Linux kernel packages in Red Hat Enterprise Linux 9. The update addresses multiple vulnerabilities including out-of-bounds access, null pointer dereference, double read, and potential memory corruption in various kernel components such as kobject_uevent, ipvs, bonding, ELF, and nvme-tcp. The update requires applying kernel patches and rebooting the system to mitigate these issues.
A moderate severity vulnerability (CVE-2024-43855) exists in the Linux kernel's md (multiple device) subsystem causing a deadlock between mddev_suspend and flush bio operations. This affects Red Hat Enterprise Linux 9 and related variants. A security update addressing this deadlock is available and requires a system reboot to take effect.
Red Hat has issued a security advisory for a kernel update addressing multiple vulnerabilities in the Linux kernel used in Red Hat Enterprise Linux 9.4 Extended Update Support. The update fixes 11 distinct security issues including race conditions, overflows, use-after-free, uninitialized value access, null dereferences, and out-of-bounds writes across various kernel subsystems such as Bluetooth, ARP, netfilter, DRM, mlxsw, IPv4/IPv6 networking, SCSI, and ARM64 cacheinfo. The update requires a system reboot to take effect.
Red Hat has issued a security advisory for a kernel update addressing two vulnerabilities in the Linux kernel. The first vulnerability (CVE-2024-50302) involves the HID core where the report buffer was not zero-initialized, potentially leading to security issues. The second vulnerability (CVE-2024-53197) affects the ALSA usb-audio driver, fixing potential out-of-bound accesses for Extigy and Mbox devices. These issues affect Red Hat Enterprise Linux 9.2 Extended Update Support and related variants. The update requires a system reboot to take effect.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104)
* kernel: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CVE-2024-53113)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935)
* kernel: arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: i40e: Do not allow untrusted VF to remove administratively set MAC (CVE-2024-26830)
* kernel: net/sched: Fix UAF when resolving a clash (CVE-2024-41040)
* kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: md: fix resync softlockup when bitmap size is less than array size (CVE-2024-38598)
* kernel: i40e: fix race condition by adding filter's intermediate sync state (CVE-2024-53088)
* kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat has released a security update for multiple important vulnerabilities in the Linux kernel packages included in Red Hat Enterprise Linux 9 and related products. The update addresses four distinct issues: an AUX buffer serialization flaw (CVE-2024-46713), a bug in RDMA bnxt_re Level-2 PBL page setup (CVE-2024-50208), a memory leak in mlxsw spectrum_ipip when changing remote IPv6 addresses (CVE-2024-50252), and a race condition in mptcp subflow creation (CVE-2024-53122). These vulnerabilities have been rated as important by Red Hat Product Security. A patch is available and applying the update requires a system reboot.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: gro: fix ownership transfer (CVE-2024-35890)
* kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat has released a security advisory addressing multiple vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9. These fixes cover a range of issues including null pointer dereferences, use-after-free bugs, information leaks, and enforcement improvements across Bluetooth, BPF, NFS, KVM, and other kernel subsystems. The update is rated as having a moderate security impact and requires a system reboot to apply. The advisory covers affected versions of Red Hat Enterprise Linux 9 and related variants.
Red Hat has released a security advisory for multiple vulnerabilities in the Linux kernel packages included with Red Hat Enterprise Linux 8. These vulnerabilities include permission bypass, potential underflow, race conditions, information leaks, validation errors, crashes, and pointer initialization issues. The update addresses nine CVEs affecting various kernel subsystems such as SELinux, networking, block request queue quality of service, ARM64 probes, XFRM, IRQ chip, netfilter, and vsock/virtio. The update requires a system reboot to take effect.