Threats Tagged 'cve-2025-68285'

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: media: rc: fix races with imon_disconnect() (CVE-2025-39993) * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: rc: fix races with imon_disconnect() (CVE-2025-39993) * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/xe: Use local fence in error path of xe_migrate_clear (CVE-2025-37869) * kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141) * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat issued a security advisory for multiple vulnerabilities in the Linux kernel packages included in Red Hat Enterprise Linux 9. The update addresses five distinct security issues affecting kernel components such as drm/xe, smb client, drm/vmwgfx, usb dwc3, and libceph. These vulnerabilities include compliance with safe access rules, verification of SMB client data parameters, command header size validation, race condition fixes, and use-after-free corrections. The advisory rates the update as important and requires a system reboot after applying the patches.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795) * kernel: KVM: arm64: Tear down vGIC on failed vCPU creation (CVE-2025-37849) * kernel: Linux kernel: ALSA: ump buffer overflow via malformed UMP SysEx message (CVE-2025-37891) * kernel: NFS: Fix a race when updating an existing write (CVE-2025-39697) * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.