Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 43

Vulnerabilities 7

• Critical 9.8
  CVE-2022-50235

  NFSD: Protect against send buffer overflow in NFSv2 READDIR

  In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READDIR Restore the previous limit on the @count argument to prevent a buffer overflow attack.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 15, 2025
• Critical 9.8
  CVE-2022-50410

  NFSD: Protect against send buffer overflow in NFSv2 READ

  In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining the RPC receive and send buffer…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 18, 2025
• High 7.5
  CVE-2022-43945

  The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 4, 2022
• High 7.0
  CVE-2022-41222

  mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held dur…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 21, 2022
• Unscored —
  CVE-2022-2873

  An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Aug 22, 2022
• Unscored —
  CVE-2022-50482

  iommu/vt-d: Clean up si_domain in the init_dmars() error path

  In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clean up si_domain in the init_dmars() error path A splat from kmem_cache_destroy() was seen with a kernel prior to commit ee2653bbe89d ("iommu/vt-d: Remove domain and devinfo mem…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 4, 2025
• Unscored —
  CVE-2022-50487 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Oct 4, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119048
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2138818
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2141752
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0832.json
• report
  https://access.redhat.com/security/cve/CVE-2022-2873
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2873
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2873
• article
  https://lore.kernel.org/lkml/20220729093451.551672-1-zheyuma97@gmail.com/T/
• report
  https://access.redhat.com/security/cve/CVE-2022-41222
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-41222
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-41222
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2
• report
  https://access.redhat.com/security/cve/CVE-2022-43945
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-43945
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-43945
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f90497a16e434c2211c66e3de8e77b17868382b8
• report
  https://access.redhat.com/security/cve/CVE-2022-50235
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2395362
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50235
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50235
• article
  https://lore.kernel.org/linux-cve-announce/2025091547-CVE-2022-50235-a5c0@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-50410
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2396536
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50410
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50410
• article
  https://lore.kernel.org/linux-cve-announce/2025091853-CVE-2022-50410-edee@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-50482
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2401576
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50482
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50482
• article
  https://lore.kernel.org/linux-cve-announce/2025100440-CVE-2022-50482-0291@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-50487
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2401498
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50487
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50487
• article
  https://lore.kernel.org/linux-cve-announce/2025100441-CVE-2022-50487-f5ea@gregkh/T