- kernel-5.14.0-503.22.1.el9_5 (rhel9)
- 5.14.0-503.40.1.el9_5
- 2025-05-16 18:34:32
- 2025-05-20 11:02:46
- K20250516_03
- CVE-2024-53104, CVSSv2 Score: 7.3
- Description:
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- CVE: https://access.redhat.com/security/cve/CVE-2024-53104
- Patch: rhel9/5.14.0-503.23.2.el9_5/CVE-2024-53104-media-uvcvideo-Skip-parsing-frames-of-type-UVC_VS_UNDEFINED.patch
- From: 5.14.0-503.23.2.el9_5
- CVE-2023-52490, CVSSv2 Score: 5.5
- Description:
mm: migrate: fix getting incorrect page mapping during page migration
- CVE: https://access.redhat.com/security/cve/CVE-2023-52490
- Patch: rhel9/5.14.0-503.26.1.el9_5/CVE-2023-52490-mm-migrate-fix-getting-incorrect-page-mapping-during-page-migration.patch
- From: 5.14.0-503.23.2.el9_5
- CVE-2024-53113, CVSSv2 Score: 5.5
- Description:
mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
- CVE: https://access.redhat.com/security/cve/CVE-2024-53113
- Patch: rhel9/5.14.0-503.31.1.el9_5/CVE-2024-53113-mm-fix-null-pointer-dereference-in-alloc-pages-bulk-noprof.patch
- From: 5.14.0-503.31.1.el9_5
- CVE-2024-53197, CVSSv2 Score: 5.5
- Description:
ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- CVE: https://access.redhat.com/security/cve/CVE-2024-53197
- Patch: rhel9/5.14.0-503.31.1.el9_5/CVE-2024-53197-ALSA-usb-audio-Fix-potential-out-of-bound-accesses-for-Extigy-and-Mbox-devices.patch
- From: 5.14.0-503.31.1.el9_5
- CVE-2023-52922, CVSSv2 Score: 7.8
- Description:
can: bcm: Fix UAF in bcm_proc_show()
- CVE: https://access.redhat.com/security/cve/CVE-2023-52922
- Patch: rhel9/5.14.0-503.31.1.el9_5/CVE-2023-52922-can-bcm-fix-uaf-in-bcm-proc-show.patch
- From: 5.14.0-503.31.1.el9_5
- CVE-2023-52605, CVSSv2 Score:
- Description:
CVE Rejected
- CVE:
- Patch: skipped/CVE-2023-52605.patch
- From:
- CVE-2024-50264, CVSSv2 Score: 7.8
- Description:
vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
- CVE: https://access.redhat.com/security/cve/CVE-2024-50264
- Patch: rhel9/5.14.0-503.31.1.el9_5/CVE-2024-50264-vsock-virtio-initialization-of-the-dangling-pointer-occurring-in-vsk-trans.patch
- From: 5.14.0-503.31.1.el9_5
- CVE-2024-50302, CVSSv2 Score: 7.8
- Description:
HID: core: zero-initialize the report buffer
- CVE: https://access.redhat.com/security/cve/CVE-2024-50302
- Patch: rhel9/5.14.0-503.31.1.el9_5/CVE-2024-50302-hid-core-zero-initialize-the-report-buffer.patch
- From: 5.14.0-503.31.1.el9_5
- CVE-2025-21785, CVSSv2 Score:
- Description:
Out of scope: ARM64 architecture isn't supported for current kernel
- CVE:
- Patch: skipped/CVE-2025-21785.patch
- From:
- CVE-2024-43855, CVSSv2 Score: 5.5
- Description:
md: fix deadlock between mddev_suspend and flush bio
- CVE: https://access.redhat.com/security/cve/CVE-2024-43855
- Patch: rhel9/5.14.0-503.35.1.el9_5/CVE-2024-43855-md-fix-deadlock-between-mddev-suspend-and-flush-bio.patch
- From: 5.14.0-503.35.1.el9_5
- CVE-2024-53150, CVSSv2 Score: 7.8
- Description:
ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- CVE: https://access.redhat.com/security/cve/CVE-2024-53150
- Patch: rhel9/5.14.0-503.38.1.el9_5/CVE-2024-53150-alsa-usb-audio-fix-out-of-bounds-reads-when-finding-clock-sources.patch
- From: 5.14.0-503.38.1.el9_5
- CVE-2025-21927, CVSSv2 Score: 7.8
- Description:
nvme-tcp: add basic support for the C2HTermReq PDU
- CVE: http://access.redhat.com/security/cve/cve-2025-21927
- Patch: rhel9/5.14.0-503.40.1.el9_5/CVE-2025-21927-nvme-tcp-add-basic-support-for-the-C2HTermReq-PDU.patch
- From: 5.14.0-503.40.1.el9_5
- CVE-2025-21927, CVSSv2 Score: 7.8
- Description:
nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- CVE: http://access.redhat.com/security/cve/cve-2025-21927
- Patch: rhel9/5.14.0-503.40.1.el9_5/CVE-2025-21927-nvme-tcp-fix-potential-memory-corruption-in-nvme_tcp.patch
- From: 5.14.0-503.40.1.el9_5
- CVE-2024-42292, CVSSv2 Score: 5.5
- Description:
kobject_uevent: Fix OOB access within zap_modalias_env()
- CVE: https://access.redhat.com/security/cve/CVE-2024-42292
- Patch: rhel9/5.14.0-503.40.1.el9_5/CVE-2024-42292-kobject-uevent-fix-oob-access-within-zap-modalias-env.patch
- From: 5.14.0-503.40.1.el9_5
- CVE-2024-42322, CVSSv2 Score: 5.5
- Description:
ipvs: properly dereference pe in ip_vs_add_service
- CVE: https://access.redhat.com/security/cve/CVE-2024-42322
- Patch: rhel9/5.14.0-503.40.1.el9_5/CVE-2024-42322-ipvs-properly-dereference-pe-in-ip-vs-add-service.patch
- From: 5.14.0-503.40.1.el9_5
- CVE-2024-44990, CVSSv2 Score: 5.5
- Description:
bonding: fix null pointer deref in bond_ipsec_offload_ok
- CVE: https://access.redhat.com/security/cve/CVE-2024-44990
- Patch: rhel9/5.14.0-503.40.1.el9_5/CVE-2024-44990-bonding-fix-null-pointer-deref-in-bond_ipsec_offload.patch
- From: 5.14.0-503.40.1.el9_5
- CVE-2024-46826, CVSSv2 Score: 5.5
- Description:
ELF: fix kernel.randomize_va_space double read
- CVE: https://access.redhat.com/security/cve/CVE-2024-46826
- Patch: rhel9/5.14.0-503.40.1.el9_5/CVE-2024-46826-elf-fix-kernel-randomize-va-space-double-read.patch
- From: 5.14.0-503.40.1.el9_5