Threats Tagged 'cve-2025-40252'

Red Hat has issued a security advisory for multiple vulnerabilities in the Linux kernel packages used in Red Hat Enterprise Linux 8 and related products. The update addresses several issues including a double free vulnerability in the NVMe driver (CVE-2024-41073), out-of-bounds reads in network drivers, overflow and heap overflow issues in cryptographic and NFS components, and privilege escalation or denial of service in the KVM virtualization module. These vulnerabilities have been rated with a security impact of Important by Red Hat. The advisory includes fixes for seven CVEs affecting various kernel subsystems. Systems must be updated and rebooted to apply the fixes. No known exploits in the wild have been reported at this time.

A security update for the Red Hat kernel-rt packages addresses multiple vulnerabilities affecting the Real Time Linux Kernel used in Red Hat Enterprise Linux 8 and related variants. The update fixes issues including double free, out-of-bounds reads, heap overflow, privilege escalation, and cryptographic key generation overflow. These vulnerabilities impact kernel components such as NVMe, network drivers, cryptographic keys, NFS server, and KVM virtualization. The update is rated as important by Red Hat and requires a system reboot to take effect.