ALSA-2025:12662
ALSA-2025:12662 · Important: kernel security update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727) * kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928) * kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CVE-2025-21929) * kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020) * kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113) * kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085) * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890) * kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052) * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086) * kernel: net/sched: fix use-after-free in taprio_dev_notifier (CVE-2025-38087) * kernel: nvme-tcp: sanitize request list handling (CVE-2025-38264) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel-abi-stablelists AlmaLinux:10
- Plages de versions concernées
- ECOSYSTEM: < 6.12.0-55.25.1.el10_0
Mettez à jour vers 6.12.0-55.25.1.el10_0
kernel-doc AlmaLinux:10
- Plages de versions concernées
- ECOSYSTEM: < 6.12.0-55.25.1.el10_0
Mettez à jour vers 6.12.0-55.25.1.el10_0
Sources originales
- https://access.redhat.com/errata/RHSA-2025:12662
- https://access.redhat.com/security/cve/CVE-2025-21727
- https://access.redhat.com/security/cve/CVE-2025-21928
- https://access.redhat.com/security/cve/CVE-2025-21929
- https://access.redhat.com/security/cve/CVE-2025-22020
- https://access.redhat.com/security/cve/CVE-2025-22085
- https://access.redhat.com/security/cve/CVE-2025-22113
- https://access.redhat.com/security/cve/CVE-2025-37890
- https://access.redhat.com/security/cve/CVE-2025-38052
- https://access.redhat.com/security/cve/CVE-2025-38086
- https://access.redhat.com/security/cve/CVE-2025-38087
- https://access.redhat.com/security/cve/CVE-2025-38264
- https://bugzilla.redhat.com/2348516
- https://bugzilla.redhat.com/2356592
- https://bugzilla.redhat.com/2356594
- https://bugzilla.redhat.com/2360099
- https://bugzilla.redhat.com/2360212
- https://bugzilla.redhat.com/2360219
- https://bugzilla.redhat.com/2366848
- https://bugzilla.redhat.com/2373380
- https://bugzilla.redhat.com/2375305
- https://bugzilla.redhat.com/2375531
- https://bugzilla.redhat.com/2378996
- https://osv.dev/vulnerability/ALSA-2025:12662