- kernel-5.14.0-503.35.1.el9_5 (rhel9)
- 5.14.0-503.40.1.el9_5
- 2025-05-16 18:34:35
- 2025-05-20 11:02:46
- K20250516_03
- CVE-2024-53150, CVSSv2 Score: 7.8
- Description:
ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- CVE: https://access.redhat.com/security/cve/CVE-2024-53150
- Patch: rhel9/5.14.0-503.38.1.el9_5/CVE-2024-53150-alsa-usb-audio-fix-out-of-bounds-reads-when-finding-clock-sources.patch
- From: 5.14.0-503.38.1.el9_5
- CVE-2025-21927, CVSSv2 Score: 7.8
- Description:
nvme-tcp: add basic support for the C2HTermReq PDU
- CVE: http://access.redhat.com/security/cve/cve-2025-21927
- Patch: rhel9/5.14.0-503.40.1.el9_5/CVE-2025-21927-nvme-tcp-add-basic-support-for-the-C2HTermReq-PDU.patch
- From: 5.14.0-503.40.1.el9_5
- CVE-2025-21927, CVSSv2 Score: 7.8
- Description:
nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- CVE: http://access.redhat.com/security/cve/cve-2025-21927
- Patch: rhel9/5.14.0-503.40.1.el9_5/CVE-2025-21927-nvme-tcp-fix-potential-memory-corruption-in-nvme_tcp.patch
- From: 5.14.0-503.40.1.el9_5
- CVE-2024-42292, CVSSv2 Score: 5.5
- Description:
kobject_uevent: Fix OOB access within zap_modalias_env()
- CVE: https://access.redhat.com/security/cve/CVE-2024-42292
- Patch: rhel9/5.14.0-503.40.1.el9_5/CVE-2024-42292-kobject-uevent-fix-oob-access-within-zap-modalias-env.patch
- From: 5.14.0-503.40.1.el9_5
- CVE-2024-42322, CVSSv2 Score: 5.5
- Description:
ipvs: properly dereference pe in ip_vs_add_service
- CVE: https://access.redhat.com/security/cve/CVE-2024-42322
- Patch: rhel9/5.14.0-503.40.1.el9_5/CVE-2024-42322-ipvs-properly-dereference-pe-in-ip-vs-add-service.patch
- From: 5.14.0-503.40.1.el9_5
- CVE-2024-44990, CVSSv2 Score: 5.5
- Description:
bonding: fix null pointer deref in bond_ipsec_offload_ok
- CVE: https://access.redhat.com/security/cve/CVE-2024-44990
- Patch: rhel9/5.14.0-503.40.1.el9_5/CVE-2024-44990-bonding-fix-null-pointer-deref-in-bond_ipsec_offload.patch
- From: 5.14.0-503.40.1.el9_5
- CVE-2024-46826, CVSSv2 Score: 5.5
- Description:
ELF: fix kernel.randomize_va_space double read
- CVE: https://access.redhat.com/security/cve/CVE-2024-46826
- Patch: rhel9/5.14.0-503.40.1.el9_5/CVE-2024-46826-elf-fix-kernel-randomize-va-space-double-read.patch
- From: 5.14.0-503.40.1.el9_5