- kernel-3.10.0-1160.118.1.0.1.el7 (oel7)
- 3.10.0-1160.119.1.0.10.el7
- 2025-09-10 19:08:32
- 2025-09-12 10:11:13
- K20250910_09
- CVE-2024-36971
- Description:
net: fix __dst_negative_advice() race
- CVE: https://access.redhat.com/security/cve/CVE-2024-36971
- Patch: rhel7/3.10.0-1160.123.1.el7/CVE-2024-36971-ELSCVE-27162-net-fix-__dst_negative_advice-race.patch
- From: 3.10.0-1160.123.1.el7
- CVE-2022-1011
- Description:
fuse: fix pipe buffer lifetime for direct_io
- CVE: https://access.redhat.com/security/cve/CVE-2022-1011
- Patch: rhel7/3.10.0-1160.123.1.el7/CVE-2022-1011-ELSCVE-14458-fuse-fix-pipe-buffer-lifetime-for-direc.patch
- From: 3.10.0-1160.123.1.el7
- CVE-2022-1011
- Description:
fuse: fix pipe buffer lifetime for direct_io
- CVE: https://access.redhat.com/security/cve/CVE-2022-1011
- Patch: rhel7/3.10.0-1160.123.1.el7/CVE-2022-1011-ELSCVE-14458-fuse-fix-pipe-buffer-lifetime-for-direc-kpatch.patch
- From: 3.10.0-1160.123.1.el7
- CVE-2024-41071
- Description:
wifi: mac80211: Avoid address calculations via out of bounds array indexing
- CVE: https://access.redhat.com/security/cve/CVE-2024-41071
- Patch: rhel7/3.10.0-1160.125.1.el7/CVE-2024-41071-wifi-mac80211-Avoid-address-calculation.patch
- From: 3.10.0-1160.125.1.el7
- CVE-2024-2201
- Description:
x86/bhi: Add support for clearing branch history at syscall entry
- CVE: https://access.redhat.com/security/cve/CVE-2024-2201
- Patch: 3.10.0/CVE-2024-2201-native-bhi-el7.patch
- From: kernel-4.18.0-553.16.1.el8_10
- CVE-2024-53104
- Description:
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- CVE: https://access.redhat.com/security/cve/CVE-2024-53104
- Patch: rhel7/3.10.0-1160.132.1.el7/CVE-2024-53104-media-uvcvideo-Skip-parsing-frames-of-type-UVC_VS_UNDEFINED.patch
- From: 3.10.0-1160.132.1.el7
- CVE-2023-52922
- Description:
can: bcm: Fix UAF in bcm_proc_show()
- CVE: https://access.redhat.com/security/cve/CVE-2023-52922
- Patch: rhel7/3.10.0-1160.133.1.el7/CVE-2023-52922-can-bcm-Fix-UAF-in-bcm_proc_show.patch
- From: 3.10.0-1160.133.1.el7
- CVE-2024-50302
- Description:
HID: core: zero-initialize the report buffer
- CVE: https://access.redhat.com/security/cve/CVE-2024-50302
- Patch: rhel7/3.10.0-1160.133.1.el7/CVE-2024-50302-HID-core-zero-initialize-the-report-buffer.patch
- From: 3.10.0-1160.133.1.el7
- CVE-2024-53197
- Description:
ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- CVE: https://access.redhat.com/security/cve/CVE-2024-53197
- Patch: rhel7/3.10.0-1160.133.1.el7/CVE-2024-53197-0001-ALSA-usb-audio-Fix-potential-out-of-bound-accesses-f.patch
- From: 3.10.0-1160.133.1.el7
- CVE-2024-53197
- Description:
ALSA: usb-audio: Fix a DMA to stack memory bug
- CVE: https://access.redhat.com/security/cve/CVE-2024-53197
- Patch: rhel7/3.10.0-1160.133.1.el7/CVE-2024-53197-0002-ALSA-usb-audio-Fix-a-DMA-to-stack-memory-bug.patch
- From: 3.10.0-1160.133.1.el7
- CVE-2024-53150
- Description:
ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- CVE: https://access.redhat.com/security/cve/CVE-2024-53150
- Patch: rhel7/3.10.0-1160.133.1.el7/CVE-2024-53150-alsa-usb-audio-fix-out-of-bounds-reads-when-finding-clock-sources.patch
- From: 3.10.0-1160.133.1.el7
- CVE-2024-53141
- Description:
netfilter: ipset: add missing range check in bitmap_ip_uadt
- CVE: https://access.redhat.com/security/cve/CVE-2024-53141
- Patch: rhel7/3.10.0-1160.119.1.el7.tuxcare.els15/CVE-2024-53141-netfilter-ipset-add-missing-range-check.patch
- From: 3.10.0-1160.119.1.el7.tuxcare.els15
- CVE-2025-22004
- Description:
net: atm: fix use after free in lec_send()
- CVE: https://access.redhat.com/security/cve/CVE-2025-22004
- Patch: rhel7/3.10.0-1160.136.1.el7/CVE-2025-22004-net-atm-fix-use-after-free-in-lec_send.patch
- From: kernel-3.10.0-1160.136.1.el7
- CVE-2022-50066
- Description:
net: atlantic: fix aq_vec index out of range error
- CVE: https://access.redhat.com/security/cve/CVE-2022-50066
- Patch: rhel7/3.10.0-1160.136.1.el7/CVE-2022-50066-net-atlantic-fix-aq_vec-index-out-of-range-error.patch
- From: kernel-3.10.0-1160.136.1.el7
- CVE-2025-38079
- Description:
crypto: algif_hash - fix double free in hash_accept
- CVE: https://access.redhat.com/security/cve/CVE-2025-38079
- Patch: rhel7/3.10.0-1160.138.1.el7/CVE-2025-38079-crypto-algif_hash-fix-double-free-in-hash_accept.patch
- From: kernel-3.10.0-1160.138.1.el7
- N/A
- Description:
Restrict access to pagemap/kpageflags/kpagecount
- CVE: http://googleprojectzero.blogspot.ru/2015/03/exploiting-dram-rowhammer-bug-to-gain.html
- Patch: 3.10.0/proc-restrict-pagemap-access-1062.patch
- From: N/A
- CVE-2025-21928
- Description:
HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- CVE: https://access.redhat.com/security/cve/CVE-2025-21928
- Patch: rhel7/3.10.0-1160.137.1.el7/CVE-2025-21928-hid-intel-ish-hid-Fix-use-after-free-issue-in-ishtp_hid_remove.patch
- From: 3.10.0-1160.137.1.el7
- CVE-2024-57980
- Description:
media: uvcvideo: Fix double free in error path
- CVE: https://access.redhat.com/security/cve/CVE-2024-57980
- Patch: rhel7/3.10.0-1160.137.1.el7/CVE-2024-57980-media-uvcvideo-Fix-double-free-in-error.patch
- From: 3.10.0-1160.137.1.el79
- CVE-2022-49788
- Description:
misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
- CVE: https://access.redhat.com/security/cve/cve-2022-49788
- Patch: rhel7/3.10.0-1160.137.1.el7/CVE-2022-49788-misc-vmw_vmci-fix-an-infoleak-in-vmci_host_do_receive_datagram.patch
- From: 3.10.0-1160.137.1.el7
- CVE-2025-23150
- Description:
ext4: fix off-by-one error in do_split
- CVE: https://access.redhat.com/security/cve/CVE-2025-23150
- Patch: rhel7/3.10.0-1160.137.1.el7/CVE-2025-23150-ext4-fix-off-by-one-error-in-do-split.patch
- From: 3.10.0-1160.137.1.el7
- CVE-2022-50022
- Description:
drivers:md:fix a potential use-after-free bug
- CVE: https://access.redhat.com/security/cve/CVE-2022-50022
- Patch: rhel7/3.10.0-1160.137.1.el7/CVE-2022-50022-drivers-md-fix-a-potential-use-after-free-bug.patch
- From: 3.10.0-1160.137.1.el7
- CVE-2025-38177
- Description:
sch_hfsc: make hfsc_qlen_notify() idempotent
- CVE: https://access.redhat.com/security/cve/CVE-2025-38177
- Patch: rhel7/3.10.0-1160.137.1.el7/CVE-2025-38177-sch_hfsc-make-hfsc_qlen_notify-idempotent.patch
- From: 3.10.0-1160.137.1.el7
- CVE-2022-50020
- Description:
ext4: avoid resizing to a partial cluster size
- CVE: https://access.redhat.com/security/cve/CVE-2022-50020
- Patch: rhel7/3.10.0-1160.137.1.el7/CVE-2022-50020-ext4-avoid-resizing-to-a-partial-cluster-size.patch
- From: 3.10.0-1160.137.1.el7
- CVE-2025-38000
- Description:
sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- CVE: https://access.redhat.com/security/cve/CVE-2025-38000
- Patch: rhel7/3.10.0-1160.137.1.el7/CVE-2025-38000-sch_hfsc-Fix-qlen-accounting-bug-when-using-peek-in-hfsc-enqueue.patch
- From: 3.10.0-1160.137.1.el7