RHSA-2021:4356 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos	bpftool	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	bpftool-debuginfo	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-abi-stablelists	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-core	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-core	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-debuginfo	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-devel	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-modules	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debug-modules-extra	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-aarch64	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-ppc64le	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-s390x	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-debuginfo-common-x86_64	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-devel	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-doc	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-modules	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-modules-extra	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-tools	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-tools-debuginfo	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-tools-libs	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-core	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-debuginfo	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-devel	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-modules	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	kernel-zfcpdump-modules-extra	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	perf	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	perf-debuginfo	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	python3-perf	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	python3-perf-debuginfo	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	bpftool-debuginfo	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debug-debuginfo	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo-common-aarch64	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo-common-ppc64le	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-debuginfo-common-x86_64	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-tools-debuginfo	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	kernel-tools-libs-devel	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	perf-debuginfo	0:4.18.0-348.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	python3-perf-debuginfo	0:4.18.0-348.el8

Vulnerabilities 61

High 8.8

CVE-2020-36158

mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jan 5, 2021
High 8.8

CVE-2021-31440 Public exploit

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An …

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

May 21, 2021
High 8.4

CVE-2023-53598

bus: mhi: host: Range check CHDBOFF and ERDBOFF

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Range check CHDBOFF and ERDBOFF If the value read from the CHDBOFF and ERDBOFF registers is outside the range of the MHI register space then an invalid address might be comput…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Oct 4, 2025
High 7.8

CVE-2021-3444

Linux kernel bpf verifier incorrect mod32 truncation

The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory lead…

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

Mar 23, 2021
High 7.8

CVE-2021-3489

Linux kernel eBPF RINGBUF map oversized allocation

The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This i…

Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

Jun 4, 2021
High 7.8

CVE-2021-3600

It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit…

The Linux Kernel Organization linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Jan 8, 2024
High 7.8

CVE-2021-47011

mm: memcontrol: slab: fix obtain a reference to a freeing memcg

In the Linux kernel, the following vulnerability has been resolved: mm: memcontrol: slab: fix obtain a reference to a freeing memcg Patch series "Use obj_cgroup APIs to charge kmem pages", v5. Since Roman's series "The new cgroup slab memory controller" appli…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Feb 28, 2024
High 7.5

CVE-2021-46983

nvmet-rdma: Fix NULL deref when SEND is completed with error

In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: Fix NULL deref when SEND is completed with error When running some traffic and taking down the link on peer, a retry counter exceeded error is received. This leads to nvmet_rdma_e…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Feb 28, 2024
High 7.1

CVE-2019-15794 Public exploit

Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs

Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for t…

Ubuntu Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

Apr 23, 2020
High 7.1

CVE-2021-47226

x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer Both Intel and AMD consider it to be architecturally valid for XRSTOR to fail with #PF but nonetheless change the regist…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

May 21, 2024
Medium 6.7

CVE-2021-23133

Linux Kernel sctp_destroy_sock race condition

A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock …

Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Apr 22, 2021
Medium 5.3

CVE-2020-26146

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fr…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
Unscored —

CVE-2019-14615 Public exploit

Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may …

Intel Intel(R) Processors linux-hwe linux-azure Debian Ubuntu

Jan 17, 2020
Unscored —

CVE-2020-0427

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local i…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Sep 17, 2020
Unscored —

CVE-2020-24502

Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before vers…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Ubuntu

Feb 17, 2021
Unscored —

CVE-2020-24503

Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an …

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Ubuntu

Feb 17, 2021
Unscored —

CVE-2020-24504

Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may all…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Feb 17, 2021
Unscored —

CVE-2020-24586

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-24587

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-24588

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even t…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-26140

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementa…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
Unscored —

CVE-2020-26141

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verif…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-26143

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implemen…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
Unscored —

CVE-2020-26144

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept p…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
Unscored —

CVE-2020-26145

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept s…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-26147

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments ev…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usuall…

linux-hwe linux-riscv linux linux-gke Debian Ubuntu

Dec 15, 2020
Unscored —

CVE-2020-29368

An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write imp…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 28, 2020
Unscored —

CVE-2020-29660

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_i…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 9, 2020
Unscored —

CVE-2020-36312

An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory l…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 6, 2021
Unscored —

CVE-2020-36386

An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hc…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jun 7, 2021
Unscored —

CVE-2021-0129

Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjac…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jun 9, 2021
Unscored —

CVE-2021-20194

There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Feb 23, 2021
Unscored —

CVE-2021-20239

A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 28, 2021
Unscored —

CVE-2021-28950

An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a ret…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 20, 2021
Unscored —

CVE-2021-28971

In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, user…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 22, 2021
Unscored —

CVE-2021-29155 Public exploit

An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds sp…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Apr 20, 2021
Unscored —

CVE-2021-29646

An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does not properly v…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 30, 2021
Unscored —

CVE-2021-29650

An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 30, 2021
Unscored —

CVE-2021-29657

arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jul 22, 2021
Unscored —

CVE-2021-31829

kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

May 6, 2021
Unscored —

CVE-2021-31916

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

May 6, 2021
Unscored —

CVE-2021-33033

The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

May 14, 2021
Unscored —

CVE-2021-33098

Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authentica…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Nov 17, 2021
Unscored —

CVE-2021-33200

kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, a…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

May 27, 2021
Unscored —

CVE-2021-3348

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 1, 2021
Unscored —

CVE-2021-3564

A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jun 8, 2021
Unscored —

CVE-2021-3573

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls i…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Aug 13, 2021
Unscored —

CVE-2021-3635

A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_A…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 13, 2021
Unscored —

CVE-2021-3659

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 22, 2022
Unscored —

CVE-2021-3679 Public exploit

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Aug 5, 2021
Unscored —

CVE-2021-3732

A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with Overlay…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 7, 2022
Unscored —

CVE-2021-4442

tcp: add sanity tests to TCP_QUEUE_SEQ

In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity tests to TCP_QUEUE_SEQ Qingyu Li reported a syzkaller bug where the repro changes RCV SEQ _after_ restoring data in the receive queue. mprotect(0x4aa000, 12288, PROT_READ) = 0…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Aug 29, 2024
Unscored —

CVE-2021-46905

net: hso: fix NULL-deref on disconnect regression

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but…

Linux Linux linux-raspi2 linux-hwe Linux Ubuntu

Feb 25, 2024
Unscored —

CVE-2021-47080

RDMA/core: Prevent divide-by-zero error triggered by the user

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prevent divide-by-zero error triggered by the user The user_entry_size is supplied by the user and later used as a denominator to calculate number of entries. The zero supplied by …

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Mar 1, 2024
Unscored —

CVE-2022-20166

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This …

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Jun 15, 2022
Unscored —

CVE-2022-50042

net: genl: fix error path memory leak in policy dumping

In the Linux kernel, the following vulnerability has been resolved: net: genl: fix error path memory leak in policy dumping If construction of the array of policies fails when recording non-first policy we need to unwind. netlink_policy_dump_add_policy() itse…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Jun 18, 2025
Unscored —

CVE-2022-50073

net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null

In the Linux kernel, the following vulnerability has been resolved: net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null Fixes a NULL pointer derefence bug triggered from tap driver. When tap_get_user calls virtio_net_hdr_to_skb…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Jun 18, 2025
Unscored —

CVE-2023-53578

net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() Syzbot reported a bug as following: ===================================================== BUG: KMSAN: uninit-value in qrtr_tx_…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Oct 4, 2025
Unscored —

CVE-2023-53607

ALSA: ymfpci: Fix BUG_ON in probe function

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: Fix BUG_ON in probe function The snd_dma_buffer.bytes field now contains the aligned size, which this snd_BUG_ON() did not account for, resulting in the following: [ 9.625915] -…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Oct 4, 2025

References

article
https://access.redhat.com/security/updates/classification/#moderate
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
report
https://bugzilla.redhat.com/show_bug.cgi?id=1509204
report
https://bugzilla.redhat.com/show_bug.cgi?id=1793880
report
https://bugzilla.redhat.com/show_bug.cgi?id=1816493
report
https://bugzilla.redhat.com/show_bug.cgi?id=1894101
report
https://bugzilla.redhat.com/show_bug.cgi?id=1900844
report
https://bugzilla.redhat.com/show_bug.cgi?id=1903244
report
https://bugzilla.redhat.com/show_bug.cgi?id=1906522
report
https://bugzilla.redhat.com/show_bug.cgi?id=1912683
report
https://bugzilla.redhat.com/show_bug.cgi?id=1913348
report
https://bugzilla.redhat.com/show_bug.cgi?id=1915825
report
https://bugzilla.redhat.com/show_bug.cgi?id=1919893
report
https://bugzilla.redhat.com/show_bug.cgi?id=1921958
report
https://bugzilla.redhat.com/show_bug.cgi?id=1923636
report
https://bugzilla.redhat.com/show_bug.cgi?id=1930376
report
https://bugzilla.redhat.com/show_bug.cgi?id=1930379
report
https://bugzilla.redhat.com/show_bug.cgi?id=1930381
report
https://bugzilla.redhat.com/show_bug.cgi?id=1933527
report
https://bugzilla.redhat.com/show_bug.cgi?id=1939341
report
https://bugzilla.redhat.com/show_bug.cgi?id=1941762
report
https://bugzilla.redhat.com/show_bug.cgi?id=1941784
report
https://bugzilla.redhat.com/show_bug.cgi?id=1945345
report
https://bugzilla.redhat.com/show_bug.cgi?id=1945388
report
https://bugzilla.redhat.com/show_bug.cgi?id=1946965
report
https://bugzilla.redhat.com/show_bug.cgi?id=1948772
report
https://bugzilla.redhat.com/show_bug.cgi?id=1951595
report
https://bugzilla.redhat.com/show_bug.cgi?id=1953847
report
https://bugzilla.redhat.com/show_bug.cgi?id=1954588
report
https://bugzilla.redhat.com/show_bug.cgi?id=1957788
report
https://bugzilla.redhat.com/show_bug.cgi?id=1959559
report
https://bugzilla.redhat.com/show_bug.cgi?id=1959642
report
https://bugzilla.redhat.com/show_bug.cgi?id=1959654
report
https://bugzilla.redhat.com/show_bug.cgi?id=1959657
report
https://bugzilla.redhat.com/show_bug.cgi?id=1959663
report
https://bugzilla.redhat.com/show_bug.cgi?id=1960490
report
https://bugzilla.redhat.com/show_bug.cgi?id=1960492
report
https://bugzilla.redhat.com/show_bug.cgi?id=1960496
report
https://bugzilla.redhat.com/show_bug.cgi?id=1960498

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Vulnerabilities 61

mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might…

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An …

bus: mhi: host: Range check CHDBOFF and ERDBOFF

Linux kernel bpf verifier incorrect mod32 truncation

Linux kernel eBPF RINGBUF map oversized allocation

It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit…

mm: memcontrol: slab: fix obtain a reference to a freeing memcg

nvmet-rdma: Fix NULL deref when SEND is completed with error

Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs

x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer

Linux Kernel sctp_destroy_sock race condition

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fr…

Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may …

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local i…

Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before vers…

Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an …

Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may all…

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even t…

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementa…

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verif…

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implemen…

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept p…

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept s…

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments ev…

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usuall…

An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write imp…

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_i…

An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory l…

An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hc…

Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjac…

There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF…

A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a…

An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a ret…

In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, user…

An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds sp…

An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does not properly v…

An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial …

arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass …

kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure …

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver …

The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and …

Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authentica…

kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, a…

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could…

A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user …

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls i…

A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_A…

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way …

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the …

A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with Overlay…

tcp: add sanity tests to TCP_QUEUE_SEQ

net: hso: fix NULL-deref on disconnect regression

RDMA/core: Prevent divide-by-zero error triggered by the user

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This …

net: genl: fix error path memory leak in policy dumping

net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null

net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()

ALSA: ymfpci: Fix BUG_ON in probe function

References