Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 43

Vulnerabilities 7

• High 8.8
  CVE-2024-25744

  In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is relat…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Feb 12, 2024
• High 7.0
  CVE-2023-6546 Public exploit

  Kernel: gsm multiplexing race condition leads to privilege escalation

  A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Dec 21, 2023
• Medium 5.5
  CVE-2021-33631

  Kernel crash in EXT4 filesystem

  Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0.

  openEuler kernel linux-raspi2 linux-hwe Debian Ubuntu
  Jan 18, 2024
• Medium 5.5
  CVE-2022-3640

  Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free

  A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a pat…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 21, 2022
• Medium 5.1
  CVE-2022-42895

  Info Leak in l2cap_core in the Linux Kernel

  There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit  https://github.com/torvalds/linux/commit/b1a2cd50c0357f…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 23, 2022
• Unscored —
  CVE-2022-49940

  tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()

  In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() A null pointer dereference can happen when attempting to access the "gsm->receive()" function in gsmld_receive_buf(). Curren…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 18, 2025
• Unscored —
  CVE-2022-50116

  tty: n_gsm: fix deadlock and link starvation in outgoing data path

  In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix deadlock and link starvation in outgoing data path The current implementation queues up new control and user packets as needed and processes this queue down to the ldisc in th…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 18, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2139610
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2147356
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2255498
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2261976
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2621.json
• report
  https://access.redhat.com/security/cve/CVE-2021-33631
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-33631
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-33631
• article
  https://seclists.org/oss-sec/2024/q1/65
• report
  https://access.redhat.com/security/cve/CVE-2022-3640
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-3640
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-3640
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=42cf46dea905a80f6de218e837ba4d4cc33d6979
• report
  https://access.redhat.com/security/cve/CVE-2022-42895
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-42895
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-42895
• article
  https://github.com/google/security-research/security/advisories/GHSA-vccx-8h74-2357
• report
  https://access.redhat.com/security/cve/CVE-2022-49940
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2373397
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-49940
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-49940
• article
  https://lore.kernel.org/linux-cve-announce/2025061848-CVE-2022-49940-181b@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-50116
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2373692
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50116
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50116
• article
  https://lore.kernel.org/linux-cve-announce/2025061809-CVE-2022-50116-bf10@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-6546
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6546
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6546
• article
  https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e3
• article
  https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527
• report
  https://access.redhat.com/security/cve/CVE-2024-25744
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2263875
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-25744
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-25744
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b82a8dbd3d2f4563156f7150c6f2ecab6e960b30