Red Hat Security Advisory: kernel security update

Fixed packages 143

Vulnerabilities 5

• Critical 9.8
  CVE-2025-21927

  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()

  In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() nvme_tcp_recv_pdu() doesn't check the validity of the header length. When header digests are enabled, a target might send a pa…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 1, 2025
• Unscored —
  CVE-2024-42292

  kobject_uevent: Fix OOB access within zap_modalias_env()

  In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 17, 2024
• Unscored —
  CVE-2024-42322

  ipvs: properly dereference pe in ip_vs_add_service

  In the Linux kernel, the following vulnerability has been resolved: ipvs: properly dereference pe in ip_vs_add_service Use pe directly to resolve sparse warning: net/netfilter/ipvs/ip_vs_ctl.c:1471:27: warning: dereference of noderef expression

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 17, 2024
• Unscored —
  CVE-2024-44990

  bonding: fix null pointer deref in bond_ipsec_offload_ok

  In the Linux kernel, the following vulnerability has been resolved: bonding: fix null pointer deref in bond_ipsec_offload_ok We must check if there is an active slave before dereferencing the pointer.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 4, 2024
• Unscored —
  CVE-2024-46826

  ELF: fix kernel.randomize_va_space double read

  In the Linux kernel, the following vulnerability has been resolved: ELF: fix kernel.randomize_va_space double read ELF loader uses "randomize_va_space" twice. It is sysctl and can change at any moment, so 2 loads could see 2 different values in theory with un…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 27, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2309853
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2315178
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2356593
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4341.json
• report
  https://access.redhat.com/security/cve/CVE-2024-42292
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2305437
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-42292
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-42292
• article
  https://lore.kernel.org/linux-cve-announce/2024081746-CVE-2024-42292-5387@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-42322
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2305467
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-42322
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-42322
• article
  https://lore.kernel.org/linux-cve-announce/2024081755-CVE-2024-42322-e2ef@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-44990
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-44990
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-44990
• article
  https://lore.kernel.org/linux-cve-announce/2024090446-CVE-2024-44990-6b62@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-46826
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-46826
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-46826
• article
  https://lore.kernel.org/linux-cve-announce/2024092750-CVE-2024-46826-7b80@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-21927
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21927
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21927
• article
  https://lore.kernel.org/linux-cve-announce/2025040133-CVE-2025-21927-36d6@gregkh/T