Summary
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214)
Bug Fix(es) and Enhancement(s):
* Possible regression with FM350GL [rhel-9.8.z] (JIRA:Rocky Linux SIG Cloud-184273)
* Rocky Linux SIG Cloud9: Fix downstream-only regression from 532af53c [rhel-9.8.z] (JIRA:Rocky Linux SIG Cloud-192430)
* gfs2: xfstests generic/363 failure [rhel-9.8.z] (JIRA:Rocky Linux SIG Cloud-214021)
* Rocky Linux SIG Cloud 9: Backport b95e0e792822 [rhel-9.8.z] (JIRA:Rocky Linux SIG Cloud-216471)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 9 | kernel | 0:5.14.0-687.34.1.el9_8.cloud.1.0 |
Vulnerabilities 1
-
Unscored —
timers: Fix NULL function pointer race in timer_shutdown_sync()
In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There is a race condition between timer_shutdown_sync() and timer expiration that can lead to hitting a WARN_ON in expire_timer…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2422686