Threats Tagged 'cve-2025-37738'

This advisory addresses two moderate-severity vulnerabilities in the Linux kernel packages used by Red Hat Enterprise Linux 8.6. The first vulnerability (CVE-2025-21905) involves the iwlwifi driver printing excessive strings from firmware files. The second vulnerability (CVE-2025-37738) concerns the ext4 filesystem ignoring extended attributes (xattrs) past their expected end. Red Hat has released a security update to fix these issues, and a system reboot is required to apply the update. The update is available for multiple Red Hat Enterprise Linux 8.6 variants. No known exploits are reported in the wild.

This advisory addresses multiple moderate-severity vulnerabilities in the Linux kernel packages used by Red Hat Enterprise Linux 9 and related variants. The fixes cover issues including improper deinitialization in the ice driver, potential memory corruption in the scheduler, hex dump handling in the ibmvnic driver, and off-by-one and extended attribute handling errors in the ext4 filesystem code. These vulnerabilities could lead to memory corruption or other kernel-level faults. Red Hat has released updated kernel packages to resolve these issues, and a system reboot is required to apply the updates.