Описание
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: cifs: Fix oops due to uninitialised variable (CVE-2025-38737)
-
kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925)
-
kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CVE-2025-39982)
-
kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
-
kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979)
-
kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CVE-2025-39983)
-
kernel: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CVE-2025-40047)
-
kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
-
kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Затронутые продукты
Rocky Linux 10
Ссылки на источники
Исправления
- Red Hat - 2393527
- Red Hat - 2400629
- Red Hat - 2404100
- Red Hat - 2404105
- Red Hat - 2404109
- Red Hat - 2404117
- Red Hat - 2406758
- Red Hat - 2406776
- Red Hat - 2414741
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.
In the Linux kernel, the following vulnerability has been resolved: c ...