Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 9

• Critical 9.8
  CVE-2025-21927

  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()

  In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() nvme_tcp_recv_pdu() doesn't check the validity of the header length. When header digests are enabled, a target might send a pa…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 1, 2025
• High 7.8
  CVE-2021-47386

  hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field

  In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• High 7.8
  CVE-2024-27056

  wifi: iwlwifi: mvm: ensure offloading TID queue exists

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: ensure offloading TID queue exists The resume code path assumes that the TX queue for the offloading TID has been configured. At resume time it then tries to sync the writ…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2024
• High 7.8
  CVE-2024-35855

  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update

  In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update The rule activity update delayed work periodically traverses the list of configured rules and queries their activi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 17, 2024
• High 7.8
  CVE-2024-47745

  mm: call the security_mmap_file() LSM hook in remap_file_pages()

  In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the proces…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Oct 21, 2024
• Medium 5.5
  CVE-2024-25739

  create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and c…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Feb 12, 2024
• Unscored —
  CVE-2023-52803

  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

  In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RPC client pipefs dentries cleanup is in separated rpc_remove_pipedir() workqueue,which takes care about pipefs superblock locking.…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 21, 2024
• Unscored —
  CVE-2024-42322

  ipvs: properly dereference pe in ip_vs_add_service

  In the Linux kernel, the following vulnerability has been resolved: ipvs: properly dereference pe in ip_vs_add_service Use pe directly to resolve sparse warning: net/netfilter/ipvs/ip_vs_ctl.c:1471:27: warning: dereference of noderef expression

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 17, 2024
• Unscored —
  CVE-2024-43871

  devres: Fix memory leakage caused by driver API devm_free_percpu()

  In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory leakage when use driver API devm_free_percpu() to free memory allocated by devm_alloc_percpu(), fixed b…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 21, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2263879
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278409
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281251
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282354
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282727
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2320248
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2356593
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4509.json
• report
  https://access.redhat.com/security/cve/CVE-2021-47386
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-47386
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-47386
• article
  https://lore.kernel.org/linux-cve-announce/2024052145-CVE-2021-47386-2701@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-52803
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52803
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52803
• article
  https://lore.kernel.org/linux-cve-announce/2024052100-CVE-2023-52803-1f43@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-25739
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-25739
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-25739
• report
  https://access.redhat.com/security/cve/CVE-2024-27056
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-27056
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-27056
• article
  https://lore.kernel.org/linux-cve-announce/2024050115-CVE-2024-27056-98c0@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-35855
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35855
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35855
• article
  https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35855-c1fb@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-42322
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2305467
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-42322
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-42322
• article
  https://lore.kernel.org/linux-cve-announce/2024081755-CVE-2024-42322-e2ef@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-43871
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2306365
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-43871
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-43871
• article
  https://lore.kernel.org/linux-cve-announce/2024082136-CVE-2024-43871-c2cd@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-47745