Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 10

• Critical 9.1
  CVE-2024-36896

  USB: core: Fix access violation during port device removal

  In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkaller revealed a bug in port.c:disable_store(): usb_hub_to_struct_hub() can return NULL if the hub that t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 30, 2024
• High 7.8
  CVE-2025-21867

  bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()

  In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a use-after-free issue in eth_skb_pkt_type()[1]. The cause of the issue was that eth_skb_pkt_type() accessed skb's…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 27, 2025
• High 7.8
  CVE-2025-38079

  crypto: algif_hash - fix double free in hash_accept

  In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. However, it is also fr…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 18, 2025
• High 7.8
  CVE-2025-38177

  sch_hfsc: make hfsc_qlen_notify() idempotent

  In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either and not friendly to its callers, like fq_codel_dequeue(). Let's make it idempotent to ease qdisc_tree_…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 4, 2025
• High 7.8
  CVE-2025-38350

  net/sched: Always pass notifications when child class becomes empty

  In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 19, 2025
• Unscored —
  CVE-2023-52598

  s390/ptrace: handle setting of fpc register correctly

  In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the floating point control (fpc) register of a traced process is modified with the ptrace interface the new value is te…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 6, 2024
• Unscored —
  CVE-2023-52686

  powerpc/powernv: Add a null pointer check in opal_event_init()

  In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 17, 2024
• Unscored —
  CVE-2023-52730

  mmc: sdio: fix possible resource leaks in some error paths

  In the Linux kernel, the following vulnerability has been resolved: mmc: sdio: fix possible resource leaks in some error paths If sdio_add_func() or sdio_init_func() fails, sdio_remove_func() can not release the resources, because the sdio function is not pre…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• Unscored —
  CVE-2024-26933

  USB: core: Fix deadlock in port "disable" sysfs attribute

  In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port "disable" sysfs attribute The show and store callback routines for the "disable" sysfs attribute file in port.c acquire the device lock for the port's parent h…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2024
• Unscored —
  CVE-2024-42090

  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER In create_pinctrl(), pinctrl_maps_mutex is acquired before calling add_setting(). If add_setting() returns -EPROBE_DEFER,…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 29, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2268309
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278240
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281311
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282640
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2284556
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2300552
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2355334
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2373383
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2376354
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2382054
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15016.json
• report
  https://access.redhat.com/security/cve/CVE-2023-52598
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52598
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52598
• article
  https://lore.kernel.org/linux-cve-announce/2024030646-CVE-2023-52598-d0a2@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-52686
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52686
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52686
• article
  https://lore.kernel.org/linux-cve-announce/2024051752-CVE-2023-52686-4a08@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-52730
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52730
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52730
• article
  https://lore.kernel.org/linux-cve-announce/2024052158-CVE-2023-52730-1c8f@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-26933
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26933
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26933
• article
  https://lore.kernel.org/linux-cve-announce/2024050123-CVE-2024-26933-c18d@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-36896
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-36896
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-36896
• article
  https://lore.kernel.org/linux-cve-announce/2024053034-CVE-2024-36896-783f@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-42090
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-42090
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-42090
• article
  https://lore.kernel.org/linux-cve-announce/2024072946-CVE-2024-42090-5687@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-21867
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21867
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21867