Threats Tagged 'cve-2025-38024'

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024) * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Multiple security vulnerabilities have been identified and fixed in the Linux kernel packages for Red Hat Enterprise Linux versions 9.4 and 9.6 Extended Update Support (EUS). These include use-after-free bugs, double free vulnerabilities, and a bug in IPv6 packet handling. The update addresses issues such as an in-kernel MMIO check flaw, RDMA/rxe use-after-free leading to potential arbitrary code execution, and a double free in the exFAT filesystem that can cause denial of service. The vendor rates the overall security impact as moderate. Systems must be updated and rebooted to apply these fixes.

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action It's not safe to access nla_len(ovs_key) if the data is smaller than the netlink header. Check that the attribute is OK first.