Red Hat Security Advisory: kernel security update

Fixed packages 160

Vulnerabilities 6

• Critical 9.8
  CVE-2025-21927

  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()

  In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() nvme_tcp_recv_pdu() doesn't check the validity of the header length. When header digests are enabled, a target might send a pa…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 1, 2025
• High 7.8
  CVE-2024-58069

  rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read

  In the Linux kernel, the following vulnerability has been resolved: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read The nvmem interface supports variable buffer sizes, while the regmap interface operates with fixed-size storage. If an nvmem clie…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Mar 6, 2025
• High 7.1
  CVE-2025-21993

  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()

  In the Linux kernel, the following vulnerability has been resolved: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() When performing an iSCSI boot using IPv6, iscsistart still reads the /sys/firmware/ibft/ethernetX/subnet-mask entry. …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 2, 2025
• Unscored —
  CVE-2024-58005

  tpm: Change to kvalloc() in eventlog/acpi.c

  In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc() in eventlog/acpi.c The following failure was reported on HPE ProLiant D320: [ 10.693310][ T1] tpm_tis STM0925:00: 2.0 TPM (device-id 0x3, rev-id 0) [ 10.848132][ T1] …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 27, 2025
• Unscored —
  CVE-2024-58007

  soc: qcom: socinfo: Avoid out of bounds read of serial number

  In the Linux kernel, the following vulnerability has been resolved: soc: qcom: socinfo: Avoid out of bounds read of serial number On MSM8916 devices, the serial number exposed in sysfs is constant and does not change across individual devices. It's always: db…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 27, 2025
• Unscored —
  CVE-2025-21633 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Jan 19, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2338813
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2348565
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2348590
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2350364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2356593
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2356908
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7423.json
• report
  https://access.redhat.com/security/cve/CVE-2024-58005
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-58005
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-58005
• article
  https://lore.kernel.org/linux-cve-announce/2025022655-CVE-2024-58005-f2fa@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-58007
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-58007
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-58007
• article
  https://lore.kernel.org/linux-cve-announce/2025022655-CVE-2024-58007-123c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-58069
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-58069
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-58069
• article
  https://lore.kernel.org/linux-cve-announce/2025030611-CVE-2024-58069-d1d4@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-21633
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21633
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21633
• article
  https://lore.kernel.org/linux-cve-announce/2025011942-CVE-2025-21633-a313@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-21927
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21927
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21927
• article
  https://lore.kernel.org/linux-cve-announce/2025040133-CVE-2025-21927-36d6@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-21993
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21993
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21993
• article
  https://lore.kernel.org/linux-cve-announce/2025040257-CVE-2025-21993-54d1@gregkh/T