KernelCare Directory

kernel-4.18.0-553.53.1.el8_10 (rhel8)
Kernel Update Version: 4.18.0-553.62.1.el8_10
Build Date: 2025-07-31 08:35:12
Release Date: 2025-08-01 10:01:15
Release: K20250731_07

CVE-2024-43842, CVSSv2 Score: 7.8
Description:
wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
CVE: https://access.redhat.com/security/cve/CVE-2024-43842
Patch: rhel8/4.18.0-553.54.1.el8_10/CVE-2024-43842-wifi-rtw89-Fix-array-index-mistake-in-rtw89_sta_info_get_iter.patch
From: 4.18.0-553.54.1.el8_10

CVE-2022-49395, CVSSv2 Score:
Description:
Out of scope: User-mode Linux isn't supported for current kernel
CVE:
Patch: skipped/CVE-2022-49395.patch
From:

CVE-2022-48919, CVSSv2 Score: 7.8
Description:
cifs: fix double free race when mount fails in cifs_get_root()
CVE: https://access.redhat.com/security/cve/CVE-2022-48919
Patch: rhel8/4.18.0-553.58.1.el8_10/CVE-2022-48919-cifs-fix-double-free-race-when-mount-fails-in-cifs_get_root.patch
From: 4.18.0-553.58.1.el8_10

CVE-2024-50301, CVSSv2 Score: 7.1
Description:
security/keys: fix slab-out-of-bounds in key_task_permission
CVE: https://access.redhat.com/security/cve/CVE-2024-50301
Patch: rhel8/4.18.0-553.58.1.el8_10/CVE-2024-50301-security-keys-fix-slab-out-of-bounds-in-key_task_permission.patch
From: 4.18.0-553.58.1.el8_10

CVE-2024-53064, CVSSv2 Score: 5.5
Description:
idpf: fix idpf_vc_core_init error path
CVE: https://access.redhat.com/security/cve/CVE-2024-53064
Patch: rhel8/4.18.0-553.58.1.el8_10/CVE-2024-53064-idpf-fix-idpf_vc_core_init-error-path.patch
From: 4.18.0-553.58.1.el8_10

CVE-2025-21764, CVSSv2 Score: 7.8
Description:
ndisc: use RCU protection in ndisc_alloc_skb()
CVE: https://access.redhat.com/security/cve/CVE-2025-21764
Patch: rhel8/4.18.0-553.58.1.el8_10/CVE-2025-21764-ndisc-use-rcu-protection-in-ndisc_alloc_skb.patch
From: 4.18.0-553.58.1.el8_10

CVE-2022-49111, CVSSv2 Score: 7.0
Description:
Bluetooth: Fix use after free in hci_send_acl
CVE: https://access.redhat.com/security/cve/CVE-2022-49111
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2022-49111-bluetooth-fix-use-after-free-in-hci_send_acl.patch
From: 4.18.0-553.60.1.el8_10

CVE-2022-49136, CVSSv2 Score: 7.8
Description:
Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set
CVE: https://access.redhat.com/security/cve/CVE-2022-49136
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2022-49136-bluetooth-hci_sync-fix-queuing-commands-when-hci_unregister-is-set.patch
From: 4.18.0-553.60.1.el8_10

CVE-2022-49058, CVSSv2 Score: 5.5
Description:
cifs: potential buffer overflow in handling symlinks
CVE: http://access.redhat.com/security/cve/cve-2022-49058
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2022-49058-cifs-potential-buffer-overflow-in-handling-symlinks.patch
From: 4.18.0-553.62.1.el8_10

CVE-2024-57980, CVSSv2 Score: 7.8
Description:
media: uvcvideo: Fix double free in error path
CVE: https://access.redhat.com/security/cve/cve-2024-57980
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2024-57980-media-uvcvideo-fix-double-free-in-error-path.patch
From: 4.18.0-553.62.1.el8_10

CVE-2025-21991, CVSSv2 Score: 7.8
Description:
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
CVE: https://access.redhat.com/security/cve/cve-2025-21991
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2025-21991-x86-microcode-amd-fix-out-of-bounds-on-systems-with-cpu-less-numa-nodes.patch
From: 4.18.0-553.62.1.el8_10

CVE-2025-22004, CVSSv2 Score: 7.8
Description:
net: atm: fix use after free in lec_send()
CVE: https://access.redhat.com/security/cve/cve-2025-22004
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2025-22004-net-atm-fix-use-after-free-in-lec-send.patch
From: 4.18.0-553.62.1.el8_10

CVE-2022-49788, CVSSv2 Score: 5.5
Description:
misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
CVE: https://access.redhat.com/security/cve/cve-2022-49788
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2022-49788-misc-vmw_vmci-fix-an-infoleak-in-vmci_host_do_receive_datagram.patch
From: 4.18.0-553.62.1.el8_10

CVE-2025-23150, CVSSv2 Score: 5.5
Description:
ext4: fix off-by-one error in do_split
CVE: https://access.redhat.com/security/cve/CVE-2025-23150
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2025-23150-ext4-fix-off-by-one-error-in-do-split.patch
From: 4.18.0-553.62.1.el8_10

CVE-2025-37738, CVSSv2 Score: 5.5
Description:
ext4: ignore xattrs past end
CVE: https://access.redhat.com/security/cve/CVE-2025-37738
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2025-37738-ext4-ignore-xattrs-past-end.patch
From: 4.18.0-553.62.1.el8_10

CVE-2024-58002, CVSSv2 Score: 7.8
Description:
media: uvcvideo: Remove dangling pointers
CVE: https://access.redhat.com/security/cve/CVE-2024-58002
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2024-58002-media-uvcvideo-Only-save-async-fh-if-success.patch
From: 4.18.0-553.62.1.el8_10

CVE-2024-58002, CVSSv2 Score: 7.8
Description:
media: uvcvideo: Remove dangling pointers
CVE: https://access.redhat.com/security/cve/CVE-2024-58002
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2024-58002-media-uvcvideo-remove-dangling-pointers.patch
From: 4.18.0-553.62.1.el8_10

CVE-2024-58002, CVSSv2 Score: 7.8
Description:
media: uvcvideo: Remove dangling pointers
CVE: https://access.redhat.com/security/cve/CVE-2024-58002
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2024-58002-media-uvcvideo-remove-dangling-pointers-kpatch.patch
From: 4.18.0-553.62.1.el8_10

CVE-2024-58002, CVSSv2 Score: 7.8
Description:
media: uvcvideo: Remove dangling pointers
CVE: https://access.redhat.com/security/cve/CVE-2024-58002
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2024-58002-convert-guard-mutex.patch
From: 4.18.0-553.62.1.el8_10

N/A, CVSSv2 Score: N/A
Description:
x86 xen add xenpv restore regs and return to usermode
CVE: N/A
Patch: 4.18.0/x86-xen-Add-xenpv_restore_regs_and_return_to_usermode-el8-372.patch
From: N/A

N/A, CVSSv2 Score: N/A
Description:
kpatch add alt asm definitions
CVE: https://www.kernel.org
Patch: 4.18.0/kpatch-add-alt-asm-definitions-el8-372.patch
From: N/A