Threats Tagged 'cve-2025-21785'

Red Hat has issued a security advisory for multiple vulnerabilities in the Linux kernel packages included in Red Hat Enterprise Linux 9.4 Extended Update Support. The update addresses 11 distinct vulnerabilities, including race conditions, buffer overflows, use-after-free, uninitialized value access, null pointer dereferences, and out-of-bounds writes. These issues affect core kernel components such as Bluetooth, ARP, netfilter, DRM, mlxsw, IPv4/IPv6 networking, SCSI, and ARM64 cacheinfo. The advisory rates the overall security impact as Important and requires a system reboot after applying the update.

A security vulnerability (CVE-2025-21785) affecting the Real Time Linux Kernel (kernel-rt) in Red Hat Enterprise Linux 8 has been addressed. The issue involves an out-of-bounds write to the cacheinfo array on arm64 architectures. Red Hat has released an important security update for kernel-rt packages to fix this vulnerability. Systems must be rebooted after applying the update for the fix to take effect.