RLSA-2025:9580
RLSA-2025:9580 · Moderate: kernel security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: cifs: fix double free race when mount fails in cifs_get_root() (CVE-2022-48919) * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301) * kernel: idpf: fix idpf_vc_core_init error path (CVE-2024-53064) * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.1 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:4.18.0-553.58.1.el8_10
Update to 0:4.18.0-553.58.1.el8_10
Original sources
- https://errata.rockylinux.org/RLSA-2025:9580
- https://bugzilla.redhat.com/show_bug.cgi?id=2307172
- https://bugzilla.redhat.com/show_bug.cgi?id=2327188
- https://bugzilla.redhat.com/show_bug.cgi?id=2327347
- https://bugzilla.redhat.com/show_bug.cgi?id=2348575
- https://bugzilla.redhat.com/show_bug.cgi?id=2373362
- https://osv.dev/vulnerability/RLSA-2025:9580