RLSA-2025:15005
RLSA-2025:15005 · Moderate: kernel security update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Fix memory accounting leak. (CVE-2025-22058) * kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823) * kernel: ext4: only dirty folios when data journaling regular files (CVE-2025-38220) * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211) * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464) * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461) * kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.3 · Élevée · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel Rocky Linux:10
- Plages de versions concernées
- ECOSYSTEM: < 0:6.12.0-55.30.1.el10_0
Mettez à jour vers 0:6.12.0-55.30.1.el10_0
Sources originales
- https://errata.rockylinux.org/RLSA-2025:15005
- https://bugzilla.redhat.com/show_bug.cgi?id=2360276
- https://bugzilla.redhat.com/show_bug.cgi?id=2365024
- https://bugzilla.redhat.com/show_bug.cgi?id=2376363
- https://bugzilla.redhat.com/show_bug.cgi?id=2376406
- https://bugzilla.redhat.com/show_bug.cgi?id=2383509
- https://bugzilla.redhat.com/show_bug.cgi?id=2383513
- https://bugzilla.redhat.com/show_bug.cgi?id=2383916
- https://osv.dev/vulnerability/RLSA-2025:15005