RLSA-2025:4341
RLSA-2025:4341 · Important: kernel security update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: kobject_uevent: Fix OOB access within zap_modalias_env() (CVE-2024-42292) * kernel: ipvs: properly dereference pe in ip_vs_add_service (CVE-2024-42322) * kernel: bonding: fix null pointer deref in bond_ipsec_offload_ok (CVE-2024-44990) * kernel: ELF: fix kernel.randomize_va_space double read (CVE-2024-46826) * kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 8.0 · Élevée · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel Rocky Linux:9
- Plages de versions concernées
- ECOSYSTEM: < 0:5.14.0-503.40.1.el9_5
Mettez à jour vers 0:5.14.0-503.40.1.el9_5
Sources originales
- https://errata.rockylinux.org/RLSA-2025:4341
- https://bugzilla.redhat.com/show_bug.cgi?id=2305437
- https://bugzilla.redhat.com/show_bug.cgi?id=2305467
- https://bugzilla.redhat.com/show_bug.cgi?id=2309853
- https://bugzilla.redhat.com/show_bug.cgi?id=2315178
- https://bugzilla.redhat.com/show_bug.cgi?id=2356593
- https://osv.dev/vulnerability/RLSA-2025:4341