Red Hat Security Advisory: kernel security update

Fixed packages 160

Vulnerabilities 2

• High 7.8
  CVE-2022-3424

  A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl funct…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 6, 2023
• High 7.8
  CVE-2025-21764

  ndisc: use RCU protection in ndisc_alloc_skb()

  In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 27, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2132640
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2348575
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8333.json
• report
  https://access.redhat.com/security/cve/CVE-2022-3424
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-3424
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-3424
• article
  https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc
• article
  https://lore.kernel.org/all/20221019031445.901570-1-zyytlz.wz@163.com/
• article
  https://www.spinics.net/lists/kernel/msg4518970.html
• report
  https://access.redhat.com/security/cve/CVE-2025-21764
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21764
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21764
• article
  https://lore.kernel.org/linux-cve-announce/2025022605-CVE-2025-21764-1061@gregkh/T