Red Hat Security Advisory: kernel security update

Fixed packages 71

Vulnerabilities 3

• High 7.8
  CVE-2024-56614

  xsk: fix OOB map writes when deleting elements

  In the Linux kernel, the following vulnerability has been resolved: xsk: fix OOB map writes when deleting elements Jordy says: " In the xsk_map_delete_elem function an unsigned integer (map->max_entries) is compared with a user-controlled signed integer (k). …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 27, 2024
• High 7.8
  CVE-2024-56615

  bpf: fix OOB devmap writes when deleting elements

  In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting elements Jordy reported issue against XSKMAP which also applies to DEVMAP - the index used for accessing map entry, due to being a signed integer, cau…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 27, 2024
• Unscored —
  CVE-2025-22126

  md: fix mddev uaf while iterating all_mddevs list

  In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating all_mddevs list While iterating all_mddevs list from md_notify_reboot() and md_exit(), list_for_each_entry_safe is used, and this can race with deletint the …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 16, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2334493
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2334573
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2360236
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10547.json
• report
  https://access.redhat.com/security/cve/CVE-2024-56614
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-56614
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-56614
• article
  https://lore.kernel.org/linux-cve-announce/2024122707-CVE-2024-56614-17c4@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-56615
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-56615
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-56615
• article
  https://lore.kernel.org/linux-cve-announce/2024122708-CVE-2024-56615-5148@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-22126
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-22126
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-22126
• article
  https://lore.kernel.org/linux-cve-announce/2025041629-CVE-2025-22126-50e3@gregkh/T