RLSA-2025:18318
RLSA-2025:18318 · Moderate: kernel security update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CVE-2025-38351) * kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571) * kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614) * kernel: ipv6: reject malicious packets in ipv6_gso_segment() (CVE-2025-38572) * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817) * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.5 · Élevée · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel Rocky Linux:10
- Plages de versions concernées
- ECOSYSTEM: < 0:6.12.0-55.40.1.el10_0
Mettez à jour vers 0:6.12.0-55.40.1.el10_0
Sources originales
- https://errata.rockylinux.org/RLSA-2025:18318
- https://bugzilla.redhat.com/show_bug.cgi?id=2382059
- https://bugzilla.redhat.com/show_bug.cgi?id=2389480
- https://bugzilla.redhat.com/show_bug.cgi?id=2389491
- https://bugzilla.redhat.com/show_bug.cgi?id=2389517
- https://bugzilla.redhat.com/show_bug.cgi?id=2395805
- https://bugzilla.redhat.com/show_bug.cgi?id=2396944
- https://osv.dev/vulnerability/RLSA-2025:18318