Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 6

• High 7.8
  CVE-2025-22020

  memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove

  In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove This fixes the following crash: ================================================================== BUG: KASAN: slab-us…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 16, 2025
• High 7.8
  CVE-2025-37797

  net_sched: hfsc: Fix a UAF vulnerability in class handling

  In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-us…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 2, 2025
• Unscored —
  CVE-2024-26878

  quota: Fix potential NULL pointer dereference

  In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference Below race may cause NULL pointer dereference P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 17, 2024
• Unscored —
  CVE-2024-41035

  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor

  In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor Syzbot has identified a bug in usbcore (see the Closes: tag below) caused by our assumption that the reserved…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 29, 2024
• Unscored —
  CVE-2025-22026

  nfsd: don't ignore the return code of svc_proc_register()

  In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register(). If the procfile creation fails, then the kernel wil…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 16, 2025
• Unscored —
  CVE-2025-38086

  net: ch9200: fix uninitialised access during mii_nway_restart

  In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access during mii_nway_restart In mii_nway_restart() the code attempts to call mii->mdio_read which is ch9200_mdio_read(). ch9200_mdio_read() utilises a local b…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 28, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2275694
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2300402
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2360099
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2360224
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2363672
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2375305
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13946.json
• report
  https://access.redhat.com/security/cve/CVE-2024-26878
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26878
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26878
• article
  https://lore.kernel.org/linux-cve-announce/2024041740-CVE-2024-26878-5748@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-41035
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-41035
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-41035
• article
  https://lore.kernel.org/linux-cve-announce/2024072922-CVE-2024-41035-5e6b@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-22020
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-22020
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-22020
• article
  https://lore.kernel.org/linux-cve-announce/2025041642-CVE-2025-22020-70e8@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-22026
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-22026
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-22026
• article
  https://lore.kernel.org/linux-cve-announce/2025041654-CVE-2025-22026-f6be@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37797
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37797
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37797
• article
  https://lore.kernel.org/linux-cve-announce/2025050210-CVE-2025-37797-2aab@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38086
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38086
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38086
• article
  https://lore.kernel.org/linux-cve-announce/2025062801-CVE-2025-38086-783b@gregkh/T