KernelCare Directory

kernel-4.18.0-553.27.1.el8_10 (rhel8)
Kernel Update Version: 4.18.0-553.84.1.el8_10
Build Date: 2025-12-17 03:12:52
Release Date: 2025-12-19 12:35:23
Release: K20251217_15

CVE-2024-27399
Description:
Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
CVE: https://access.redhat.com/security/cve/CVE-2024-27399
Patch: rhel8/4.18.0-553.30.1.el8_10/CVE-2024-27399-bluetooth-l2cap-fix-null-ptr-deref-in-l2cap-chan-timeout.patch
From: 4.18.0-553.30.1.el8_10

CVE-2024-38564
Description:
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
CVE: https://access.redhat.com/security/cve/CVE-2024-38564
Patch: rhel8/4.18.0-553.30.1.el8_10/CVE-2024-38564-bpf-add-bpf-prog-type-cgroup-skb-attach-type-enforcement-in-bpf-link-create.patch
From: 4.18.0-553.30.1.el8_10

CVE-2024-46858
Description:
mptcp: pm: Fix uaf in __timer_delete_sync
CVE: https://access.redhat.com/security/cve/CVE-2024-46858
Patch: rhel8/4.18.0-553.30.1.el8_10/CVE-2024-46858-mptcp-pm-fix-uaf-in-timer-delete-sync.patch
From: 4.18.0-553.30.1.el8_10

CVE-2024-27043
Description:
media: edia: dvbdev: fix a use-after-free
CVE: https://access.redhat.com/security/cve/CVE-2024-27043
Patch: rhel8/4.18.0-553.30.1.el8_10/CVE-2024-27043-media-edia-dvbdev-fix-a-use-after-free.patch
From: 4.18.0-553.30.1.el8_10

CVE-2024-50264
Description:
vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
CVE: https://access.redhat.com/security/cve/CVE-2024-50264
Patch: rhel8/4.18.0-553.32.1.el8_10/CVE-2024-50264-vsock-virtio-initialization-of-the-dangling-pointer-occurring-in-vsk-trans.patch
From: 4.18.0-553.32.1.el8_10

CVE-2024-50082
Description:
blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
CVE: https://access.redhat.com/security/cve/CVE-2024-50082
Patch: rhel8/4.18.0-553.32.1.el8_10/CVE-2024-50082-blk-rq-qos-fix-crash-on-rq-qos-wait-vs-rq-qos-wake-function-race.patch
From: 4.18.0-553.32.1.el8_10

CVE-2024-50256
Description:
netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
CVE: https://access.redhat.com/security/cve/CVE-2024-50256
Patch: rhel8/4.18.0-553.32.1.el8_10/CVE-2024-50256-netfilter-nf-reject-ipv6-fix-potential-crash-in-nf-send-reset6.patch
From: 4.18.0-553.32.1.el8_10

CVE-2024-46695
Description:
selinux,smack: don't bypass permissions check in inode_setsecctx hook
CVE: https://access.redhat.com/security/cve/CVE-2024-46695
Patch: rhel8/4.18.0-553.32.1.el8_10/CVE-2024-46695-selinux-smack-don-t-bypass-permissions-check-in-inode-setsecctx-hook.patch
From: 4.18.0-553.32.1.el8_10

CVE-2024-49949
Description:
net: avoid potential underflow in qdisc_pkt_len_init() with UFO
CVE: https://access.redhat.com/security/cve/CVE-2024-49949
Patch: rhel8/4.18.0-553.32.1.el8_10/CVE-2024-49949-net-avoid-potential-underflow-in-qdisc-pkt-len-init-with-ufo.patch
From: 4.18.0-553.32.1.el8_10

CVE-2024-50142
Description:
xfrm: validate new SA's prefixlen using SA family when sel.family is unset
CVE: https://access.redhat.com/security/cve/CVE-2024-50142
Patch: rhel8/4.18.0-553.32.1.el8_10/CVE-2024-50142-xfrm-validate-new-sa-s-prefixlen-using-sa-family-when-sel-family-is-unset.patch
From: 4.18.0-553.32.1.el8_10

CVE-2024-50110
Description:
xfrm: fix one more kernel-infoleak in algo dumping
CVE: https://access.redhat.com/security/cve/CVE-2024-50110
Patch: rhel8/4.18.0-553.32.1.el8_10/CVE-2024-50110-xfrm-fix-one-more-kernel-infoleak-in-algo-dumping.patch
From: 4.18.0-553.32.1.el8_10

CVE-2024-50192
Description:
arm64: Low-score CVE requiring adaptation that is hard to implement; targets very rare hardware
CVE:
Patch: skipped/CVE-2024-50192.patch
From:

CVE-2024-53088
Description:
i40e: fix i40e_count_filters() to count only active/new filters
CVE: https://access.redhat.com/security/cve/CVE-2024-53088
Patch: rhel8/4.18.0-553.34.1.el8_10/CVE-2024-53088-i40e-fix-i40e_count_filters-to-count-only-active-new.patch
From: 4.18.0-553.34.1.el8_10

CVE-2024-53088
Description:
i40e: fix race condition by adding filter's intermediate sync state
CVE: https://access.redhat.com/security/cve/CVE-2024-53088
Patch: rhel8/4.18.0-553.34.1.el8_10/CVE-2024-53088-i40e-fix-race-condition-by-adding-filter-s-intermediate-sync-state.patch
From: 4.18.0-553.34.1.el8_10

CVE-2024-53088
Description:
i40e: fix race condition by adding filter's intermediate sync state
CVE: https://access.redhat.com/security/cve/CVE-2024-53088
Patch: rhel8/4.18.0-553.34.1.el8_10/CVE-2024-53088-i40e-fix-race-condition-by-adding-filter-s-intermediate-sync-state-kpatch.patch
From: 4.18.0-553.34.1.el8_10

CVE-2024-53122
Description:
mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
CVE: https://access.redhat.com/security/cve/CVE-2024-53122
Patch: rhel8/4.18.0-553.34.1.el8_10/CVE-2024-53122-mptcp-cope-racing-subflow-creation-in-mptcp-rcv-space-adjust.patch
From: 4.18.0-553.34.1.el8_10

CVE-2024-26935
Description:
scsi: core: Fix unremoved procfs host directory regression
CVE: https://access.redhat.com/security/cve/CVE-2024-26935
Patch: rhel8/4.18.0-553.37.1.el8_10/CVE-2024-26935-scsi-core-fix-unremoved-procfs-host-directory-regression.patch
From: 4.18.0-553.37.1.el8_10

CVE-2024-53104
Description:
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
CVE: https://access.redhat.com/security/cve/CVE-2024-53104
Patch: rhel8/4.18.0-553.40.1.el8_10/CVE-2024-53104-media-uvcvideo-Skip-parsing-frames-of-type-UVC_VS_UNDEFINED.patch
From: 4.18.0-553.40.1.el8_10

CVE-2024-50302
Description:
HID: core: zero-initialize the report buffer
CVE: https://access.redhat.com/security/cve/cve-2024-50302
Patch: 2024/CVE-2024-50302/CVE-2024-50302-hid-core-zero-initialize-the-report-buffer.patch
From: 4.18.0-553.44.1.el8_10

CVE-2024-53197
Description:
ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
CVE: https://access.redhat.com/security/cve/cve-2024-53197
Patch: 2024/CVE-2024-53197/CVE-2024-53197-alsa-usb-audio-fix-potential-out-of-bound-accesses-for-extigy-and-mbox-devices.patch
From: 4.18.0-553.44.1.el8_10

CVE-2024-57807
Description:
scsi: megaraid_sas: Fix for a potential deadlock
CVE: https://access.redhat.com/security/cve/cve-2024-57807
Patch: 2024/CVE-2024-57807/CVE-2024-57807-scsi-megaraid-sas-fix-for-a-potential-deadlock.patch
From: 4.18.0-553.44.1.el8_10

CVE-2024-57979
Description:
PPS for embedded GPS devices. Irrelevant for servers.
CVE:
Patch: skipped/CVE-2024-57979.patch
From:

CVE-2023-52922
Description:
can: bcm: Fix UAF in bcm_proc_show()
CVE: https://access.redhat.com/security/cve/CVE-2023-52922
Patch: rhel8/4.18.0-553.45.1.el8_10/CVE-2023-52922-can-bcm-Fix-UAF-in-bcm_proc_show.patch
From: 4.18.0-553.45.1.el8_10

CVE-2025-21785
Description:
Out of scope: ARM64 architecture isn't supported for current kernel
CVE:
Patch: skipped/CVE-2025-21785.patch
From:

CVE-2024-53150
Description:
ALSA: usb-audio: Fix out of bounds reads when finding clock sources
CVE: https://access.redhat.com/security/cve/CVE-2024-53150
Patch: rhel8/4.18.0-553.50.1.el8_10/CVE-2024-53150-alsa-usb-audio-fix-out-of-bounds-reads-when-finding-clock-sources.patch
From: 4.18.0-553.50.1.el8_10

CVE-2024-53141
Description:
netfilter: ipset: add missing range check in bitmap_ip_uadt
CVE: https://access.redhat.com/security/cve/CVE-2024-53141
Patch: rhel8/4.18.0-553.52.1.el8_10/CVE-2024-53141-netfilter-ipset-add-missing-range-check-in-bitmap-ip-uadt.patch
From: 4.18.0-553.52.1.el8_10

CVE-2022-49011
Description:
hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
CVE: https://access.redhat.com/security/cve/CVE-2022-49011
Patch: rhel8/4.18.0-553.52.1.el8_10/CVE-2022-49011-hwmon-coretemp-fix-pci-device-refcount-leak-in-nv1a_.patch
From: 4.18.0-553.52.1.el8_10

CVE-2024-40906
Description:
net/mlx5: Always stop health timer during driver removal
CVE: https://access.redhat.com/security/cve/CVE-2024-40906
Patch: rhel8/4.18.0-553.53.1.el8_10/CVE-2024-40906-net-mlx5-always-stop-health-timer-during-driver-removal.patch
From: 4.18.0-553.53.1.el8_10

CVE-2024-44970
Description:
net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink
CVE: https://access.redhat.com/security/cve/CVE-2024-44970
Patch: rhel8/4.18.0-553.53.1.el8_10/CVE-2024-44970-net-mlx5e-SHAMPO-Fix-invalid-WQ-linked-list-unlink.patch
From: 4.18.0-553.53.1.el8_10

CVE-2025-21756
Description:
vsock: Keep the binding until socket destruction
CVE: https://access.redhat.com/security/cve/CVE-2025-21756
Patch: rhel8/4.18.0-553.53.1.el8_10/CVE-2025-21756-vsock-keep-the-binding-until-socket-destruction.patch
From: 4.18.0-553.53.1.el8_10

CVE-2025-21756
Description:
vsock: Orphan socket after transport release
CVE: https://access.redhat.com/security/cve/CVE-2025-21756
Patch: rhel8/4.18.0-553.53.1.el8_10/CVE-2025-21756-vsock-orphan-socket-after-transport-release.patch
From: 4.18.0-553.53.1.el8_10

CVE-2024-43842
Description:
wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
CVE: https://access.redhat.com/security/cve/CVE-2024-43842
Patch: rhel8/4.18.0-553.54.1.el8_10/CVE-2024-43842-wifi-rtw89-Fix-array-index-mistake-in-rtw89_sta_info_get_iter.patch
From: 4.18.0-553.54.1.el8_10

CVE-2022-49395
Description:
Out of scope: User-mode Linux isn't supported for current kernel
CVE:
Patch: skipped/CVE-2022-49395.patch
From:

CVE-2022-48919
Description:
cifs: fix double free race when mount fails in cifs_get_root()
CVE: https://access.redhat.com/security/cve/CVE-2022-48919
Patch: rhel8/4.18.0-553.58.1.el8_10/CVE-2022-48919-cifs-fix-double-free-race-when-mount-fails-in-cifs_get_root.patch
From: 4.18.0-553.58.1.el8_10

CVE-2024-50301
Description:
security/keys: fix slab-out-of-bounds in key_task_permission
CVE: https://access.redhat.com/security/cve/CVE-2024-50301
Patch: rhel8/4.18.0-553.58.1.el8_10/CVE-2024-50301-security-keys-fix-slab-out-of-bounds-in-key_task_permission.patch
From: 4.18.0-553.58.1.el8_10

CVE-2024-53064
Description:
idpf: fix idpf_vc_core_init error path
CVE: https://access.redhat.com/security/cve/CVE-2024-53064
Patch: rhel8/4.18.0-553.58.1.el8_10/CVE-2024-53064-idpf-fix-idpf_vc_core_init-error-path.patch
From: 4.18.0-553.58.1.el8_10

CVE-2025-21764
Description:
ndisc: use RCU protection in ndisc_alloc_skb()
CVE: https://access.redhat.com/security/cve/CVE-2025-21764
Patch: rhel8/4.18.0-553.58.1.el8_10/CVE-2025-21764-ndisc-use-rcu-protection-in-ndisc_alloc_skb.patch
From: 4.18.0-553.58.1.el8_10

CVE-2022-49111
Description:
Bluetooth: Fix use after free in hci_send_acl
CVE: https://access.redhat.com/security/cve/CVE-2022-49111
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2022-49111-bluetooth-fix-use-after-free-in-hci_send_acl.patch
From: 4.18.0-553.60.1.el8_10

CVE-2022-49136
Description:
Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set
CVE: https://access.redhat.com/security/cve/CVE-2022-49136
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2022-49136-bluetooth-hci_sync-fix-queuing-commands-when-hci_unregister-is-set.patch
From: 4.18.0-553.60.1.el8_10

CVE-2022-49058
Description:
cifs: potential buffer overflow in handling symlinks
CVE: http://access.redhat.com/security/cve/cve-2022-49058
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2022-49058-cifs-potential-buffer-overflow-in-handling-symlinks.patch
From: 4.18.0-553.62.1.el8_10

CVE-2024-57980
Description:
media: uvcvideo: Fix double free in error path
CVE: https://access.redhat.com/security/cve/cve-2024-57980
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2024-57980-media-uvcvideo-fix-double-free-in-error-path.patch
From: 4.18.0-553.62.1.el8_10

CVE-2025-21991
Description:
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
CVE: https://access.redhat.com/security/cve/cve-2025-21991
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2025-21991-x86-microcode-amd-fix-out-of-bounds-on-systems-with-cpu-less-numa-nodes.patch
From: 4.18.0-553.62.1.el8_10

CVE-2025-22004
Description:
net: atm: fix use after free in lec_send()
CVE: https://access.redhat.com/security/cve/cve-2025-22004
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2025-22004-net-atm-fix-use-after-free-in-lec-send.patch
From: 4.18.0-553.62.1.el8_10

CVE-2022-49788
Description:
misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
CVE: https://access.redhat.com/security/cve/cve-2022-49788
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2022-49788-misc-vmw_vmci-fix-an-infoleak-in-vmci_host_do_receive_datagram.patch
From: 4.18.0-553.62.1.el8_10

CVE-2025-23150
Description:
ext4: fix off-by-one error in do_split
CVE: https://access.redhat.com/security/cve/CVE-2025-23150
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2025-23150-ext4-fix-off-by-one-error-in-do-split.patch
From: 4.18.0-553.62.1.el8_10

CVE-2025-37738
Description:
ext4: ignore xattrs past end
CVE: https://access.redhat.com/security/cve/CVE-2025-37738
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2025-37738-ext4-ignore-xattrs-past-end.patch
From: 4.18.0-553.62.1.el8_10

CVE-2024-58002
Description:
media: uvcvideo: Remove dangling pointers
CVE: https://access.redhat.com/security/cve/CVE-2024-58002
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2024-58002-media-uvcvideo-Only-save-async-fh-if-success.patch
From: 4.18.0-553.62.1.el8_10

CVE-2024-58002
Description:
media: uvcvideo: Remove dangling pointers
CVE: https://access.redhat.com/security/cve/CVE-2024-58002
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2024-58002-media-uvcvideo-remove-dangling-pointers.patch
From: 4.18.0-553.62.1.el8_10

CVE-2024-58002
Description:
media: uvcvideo: Remove dangling pointers
CVE: https://access.redhat.com/security/cve/CVE-2024-58002
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2024-58002-media-uvcvideo-remove-dangling-pointers-kpatch.patch
From: 4.18.0-553.62.1.el8_10

CVE-2024-58002
Description:
media: uvcvideo: Remove dangling pointers
CVE: https://access.redhat.com/security/cve/CVE-2024-58002
Patch: rhel8/4.18.0-553.60.1.el8_10/CVE-2024-58002-convert-guard-mutex.patch
From: 4.18.0-553.62.1.el8_10

CVE-2024-50154
Description:
tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
CVE: https://access.redhat.com/security/cve/CVE-2024-50154
Patch: rhel8/4.18.0-553.63.1.el8_10/CVE-2024-50154-tcp-dccp-Don-t-use-timer_pending-in-reqsk_queue_unli.patch
From: 4.18.0-553.63.1.el8_10

CVE-2025-38086
Description:
net: ch9200: fix uninitialised access during mii_nway_restart
CVE: https://access.redhat.com/security/cve/CVE-2025-38086
Patch: rhel8/4.18.0-553.63.1.el8_10/CVE-2025-38086-net-ch9200-fix-uninitialised-access-during-mii_nway_restart.patch
From: 4.18.0-553.63.1.el8_10

CVE-2025-21919
Description:
sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
CVE: https://access.redhat.com/security/cve/CVE-2025-21919
Patch: rhel8/4.18.0-553.64.1.el8_10/CVE-2025-21919-sched-fair-fix-potential-memory-corruption-in-child-cfs-rq-on-list.patch
From: kernel-4.18.0-553.63.1.el8_10

CVE-2025-21905
Description:
wifi: iwlwifi: limit printed string from FW file
CVE: https://access.redhat.com/security/cve/CVE-2025-21905
Patch: rhel8/4.18.0-553.64.1.el8_10/CVE-2025-21905-wifi-iwlwifi-limit-printed-string-from-fw-file.patch
From: kernel-4.18.0-553.63.1.el8_10

CVE-2022-49977
Description:
ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
CVE: https://access.redhat.com/security/cve/CVE-2022-49977
Patch: rhel8/4.18.0-553.64.1.el8_10/CVE-2022-49977-ftrace-Fix-NULL-pointer-dereference-in-is_ftrace_trampoline-when-ftrace-is-dead.patch
From: 4.18.0-553.64.1.el8_10

CVE-2025-21928
Description:
HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
CVE: https://access.redhat.com/security/cve/CVE-2025-21928
Patch: rhel8/4.18.0-553.66.1.el8_10/CVE-2025-21928-hid-intel-ish-hid-fix-use-after-free-issue-in-ishtp-hid-remove.patch
From: 4.18.0-553.66.1.el8_10

CVE-2025-22020
Description:
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
CVE: https://access.redhat.com/security/cve/CVE-2025-22020
Patch: rhel8/4.18.0-553.66.1.el8_10/CVE-2025-22020-memstick-rtsx-usb-ms-fix-slab-use-after-free-in-rtsx-usb-ms-drv-remove.patch
From: 4.18.0-553.66.1.el8_10

CVE-2022-50020
Description:
ext4: avoid resizing to a partial cluster size
CVE: https://access.redhat.com/security/cve/CVE-2022-50020
Patch: rhel8/4.18.0-553.66.1.el8_10/CVE-2022-50020-ext4-avoid-resizing-to-a-partial-cluster-size.patch
From: 4.18.0-553.66.1.el8_10

CVE-2025-38079
Description:
crypto: algif_hash - fix double free in hash_accept
CVE: https://access.redhat.com/security/cve/CVE-2025-38079
Patch: rhel8/4.18.0-553.66.1.el8_10/CVE-2025-38079-crypto-algif_hash-fix-double-free-in-hash_accept.patch
From: 4.18.0-553.66.1.el8_10

CVE-2025-37890
Description:
net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
CVE: https://access.redhat.com/security/cve/CVE-2025-37890
Patch: rhel8/4.18.0-553.66.1.el8_10/CVE-2025-37890-net-sched-hfsc-fix-a-uaf-vulnerability-in-class-with-netem-as-child-qdisc.patch
From: 4.18.0-553.66.1.el8_10

CVE-2025-37890
Description:
sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
CVE: https://access.redhat.com/security/cve/CVE-2025-37890
Patch: rhel8/4.18.0-553.66.1.el8_10/CVE-2025-37890-sch_hfsc-Fix-qlen-accounting-bug-when-using-peek-in-hfsc_enqueue.patch
From: 4.18.0-553.66.1.el8_10

CVE-2025-37890
Description:
net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
CVE: https://access.redhat.com/security/cve/CVE-2025-37890
Patch: rhel8/4.18.0-553.66.1.el8_10/CVE-2025-37890-net-sched-hfsc-address-reentrant-enqueue-adding-class-to-eltree-twice.patch
From: 4.18.0-553.66.1.el8_10

CVE-2025-38052
Description:
Complex adaptation required. Low impact CVE
CVE:
Patch: skipped/CVE-2025-38052.patch
From:

CVE-2021-47670
Description:
can: peak_usb: fix use after free bugs
CVE: https://access.redhat.com/security/cve/CVE-2021-47670
Patch: rhel8/4.18.0-553.69.1.el8_10/CVE-2021-47670-can-peak_usb-fix-use-after-free-bugs.patch
From: kernel-4.18.0-553.69.1.el8_10

CVE-2025-21727
Description:
padata: fix UAF in padata_reorder
CVE: https://access.redhat.com/security/cve/CVE-2025-21727
Patch: rhel8/4.18.0-553.69.1.el8_10/CVE-2025-21727-padata-fix-uaf-in-padata-reorder.patch
From: kernel-4.18.0-553.69.1.el8_10

CVE-2025-21759
Description:
ipv6: mcast: extend RCU protection in igmp6_send()
CVE: https://access.redhat.com/security/cve/CVE-2025-21759
Patch: rhel8/4.18.0-553.69.1.el8_10/CVE-2025-21759-ipv6-mcast-add-dev_net_rcu-helper.patch
From: kernel-4.18.0-553.69.1.el8_10

CVE-2025-21759
Description:
ipv6: mcast: extend RCU protection in igmp6_send()
CVE: https://access.redhat.com/security/cve/CVE-2025-21759
Patch: rhel8/4.18.0-553.69.1.el8_10/CVE-2025-21759-ipv6-mcast-extend-RCU-protection-in-igmp6_send.patch
From: kernel-4.18.0-553.69.1.el8_10

CVE-2025-38159
Description:
wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
CVE: https://access.redhat.com/security/cve/CVE-2025-38159
Patch: rhel8/4.18.0-553.69.1.el8_10/CVE-2025-38159-wifi-rtw88-fix-the-para-buffer-size-to-avoid-reading-out-of-bounds.patch
From: kernel-4.18.0-553.69.1.el8_10

CVE-2024-56644
Description:
net/ipv6: release expired exception dst cached in socket
CVE: https://access.redhat.com/security/cve/CVE-2024-56644
Patch: rhel8/4.18.0-553.69.1.el8_10/CVE-2024-56644-net-ipv6-release-expired-exception-dst-cached-in-socket.patch
From: kernel-4.18.0-553.69.1.el8_10

CVE-2025-38085
Description:
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
CVE: https://access.redhat.com/security/cve/CVE-2025-38085
Patch: rhel8/4.18.0-553.69.1.el8_10/CVE-2025-38085-mm-hugetlb-fix-huge_pmd_unshare-vs-GUP-fast-race.patch
From: kernel-4.18.0-553.69.1.el8_10

CVE-2025-22097
Description:
drm/vkms: Fix use after free and double free on init error
CVE: https://access.redhat.com/security/cve/CVE-2025-22097
Patch: rhel8/4.18.0-553.70.1.el8_10/CVE-2025-22097-drm-vkms-fix-use-after-free-and-double-free-on-init-error.patch
From: 4.18.0-553.70.1.el8_10

CVE-2025-22097
Description:
drm/vkms: Fix use after free and double free on init error
CVE: https://access.redhat.com/security/cve/CVE-2025-22097
Patch: rhel8/4.18.0-553.70.1.el8_10/CVE-2025-22097-drm-vkms-fix-use-after-free-and-double-free-on-init-error-kpatch.patch
From: 4.18.0-553.70.1.el8_10

CVE-2025-37914
Description:
net_sched: ets: Fix double list add in class with netem as child qdisc
CVE: https://access.redhat.com/security/cve/CVE-2025-37914
Patch: rhel8/4.18.0-553.70.1.el8_10/CVE-2025-37914-net_sched-ets-fix-double-list-add-in-class-with-netem-as-child-qdisc.patch
From: 4.18.0-553.70.1.el8_10

CVE-2025-38380
Description:
i2c/designware: Fix an initialization issue
CVE: https://access.redhat.com/security/cve/CVE-2025-38380
Patch: rhel8/4.18.0-553.70.1.el8_10/CVE-2025-38380-i2c-designware-Fix-an-initialization-issue.patch
From: 4.18.0-553.70.1.el8_10

CVE-2025-38250
Description:
Bluetooth: hci_core: Fix use-after-free in vhci_flush()
CVE: https://access.redhat.com/security/cve/CVE-2025-38250
Patch: rhel8/4.18.0-553.70.1.el8_10/CVE-2025-38250-bluetooth-hci-core-fix-use-after-free-in-vhci-flush-553.58.1.patch
From: 5.14.0-570.35.1.el9_6

N/A
Description:
module: use RCU to synchronize find_module
CVE: N/A
Patch: rhel8/remove-locking-check-in-find-module.patch
From: N/A

CVE-2025-22058
Description:
udp: Fix memory accounting leak.
CVE: https://access.redhat.com/security/cve/CVE-2025-22058
Patch: rhel8/4.18.0-553.71.1.el8_10/CVE-2025-22058-udp-Fix-memory-accounting-leak.patch
From: kernel-4.18.0-553.71.1.el8_10

CVE-2025-38200
Description:
i40e: fix MMIO write access to an invalid page in i40e_clear_hw
CVE: https://access.redhat.com/security/cve/CVE-2025-38200
Patch: rhel8/4.18.0-553.71.1.el8_10/CVE-2025-38200-i40e-fix-MMIO-write-access-to-an-invalid-page-in-i40e_clear_hw.patch
From: kernel-4.18.0-553.71.1.el8_10

CVE-2025-38477
Description:
net/sched: sch_qfq: Fix race condition on qfq_aggregate
CVE: https://access.redhat.com/security/cve/CVE-2025-38477
Patch: rhel8/4.18.0-553.72.1.el8_10/CVE-2025-38477-net-sched-sch_qfq-Fix-race-condition-on-qfq_aggregate.patch
From: 4.18.0-553.72.1.el8_10

CVE-2025-38477
Description:
net/sched: sch_qfq: Fix race condition on qfq_aggregate
CVE: https://access.redhat.com/security/cve/CVE-2025-38477
Patch: rhel8/4.18.0-553.72.1.el8_10/CVE-2025-38477-net-sched-sch_qfq-Avoid-triggering-might_sleep-in-atomic-context-in-qfq_delete_class.patch
From: 4.18.0-553.72.1.el8_10

CVE-2025-38464
Description:
tipc: Fix use-after-free in tipc_conn_close().
CVE: https://access.redhat.com/security/cve/CVE-2025-38464
Patch: rhel8/4.18.0-553.72.1.el8_10/CVE-2025-38464-tipc-fix-use-after-free-in-tipc-conn-close.patch
From: 4.18.0-553.72.1.el8_10

CVE-2025-38211
Description:
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
CVE: https://access.redhat.com/security/cve/CVE-2025-38211
Patch: rhel8/4.18.0-553.72.1.el8_10/CVE-2025-38211-rdma-iwcm-Fix-a-use-after-free-related-to-destroying-CM-IDs.patch
From: 4.18.0-553.72.1.el8_10

CVE-2025-38211
Description:
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
CVE: https://access.redhat.com/security/cve/CVE-2025-38211
Patch: rhel8/4.18.0-553.72.1.el8_10/CVE-2025-38211-rdma-iwcm-fix-use-after-free-of-work-objects-after-cm-id-destruction.patch
From: 4.18.0-553.72.1.el8_10

CVE-2025-38332
Description:
scsi: lpfc: Use memcpy() for BIOS version
CVE: https://access.redhat.com/security/cve/CVE-2025-38332
Patch: rhel8/4.18.0-553.72.1.el8_10/CVE-2025-38332-scsi-lpfc-use-memcpy-for-bios-version.patch
From: 4.18.0-553.72.1.el8_10

CVE-2022-49985
Description:
bpf: Don't use tnum_range on array range checking for poke descriptors
CVE: https://access.redhat.com/security/cve/CVE-2022-49985
Patch: rhel8/4.18.0-553.74.1.el8_10/CVE-2022-49985-bpf-don-t-use-tnum_range-on-array-range-checking-for-poke-descriptors.patch
From: 4.18.0-553.74.1.el8_10

CVE-2025-38352
Description:
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
CVE: https://access.redhat.com/security/cve/CVE-2025-38352
Patch: rhel8/4.18.0-553.74.1.el8_10/CVE-2025-38352-posix-cpu-timers-fix-race-between-handle_posix_cpu_timers-and-posix_cpu_timer_del.patch
From: 4.18.0-553.74.1.el8_10

CVE-2023-53125
Description:
net: usb: smsc75xx: Limit packet length to skb->len
CVE: https://access.redhat.com/security/cve/CVE-2023-53125
Patch: rhel8/4.18.0-553.75.1.el8_10/CVE-2023-53125-net-usb-smsc75xx-Limit-packet-length-to-skb-len.patch
From: kernel-4.18.0-553.75.1.el8_10

CVE-2023-53125
Description:
net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull
CVE: https://access.redhat.com/security/cve/CVE-2023-53125
Patch: rhel8/4.18.0-553.75.1.el8_10/CVE-2023-53125-net-usb-smsc75xx-Move-packet-length-check-to-prevent-kernel-panic-in-skb_pull.patch
From: kernel-4.18.0-553.75.1.el8_10

CVE-2025-38350
Description:
sch_qfq: make qfq_qlen_notify() idempotent
CVE: https://access.redhat.com/security/cve/CVE-2025-38350
Patch: rhel8/4.18.0-553.75.1.el8_10/CVE-2025-38350-sch_qfq-make-qfq_qlen_notify-idempotent.patch
From: kernel-4.18.0-553.75.1.el8_10

CVE-2025-38350
Description:
sch_cbq: make cbq_qlen_notify() idempotent
CVE: https://access.redhat.com/security/cve/CVE-2025-38350
Patch: rhel8/4.18.0-553.75.1.el8_10/CVE-2025-38350-sch_cbq-make-cbq_qlen_notify-idempotent.patch
From: kernel-4.18.0-553.75.1.el8_10

CVE-2025-38350
Description:
sch_htb: make htb_qlen_notify() idempotent
CVE: https://access.redhat.com/security/cve/CVE-2025-38350
Patch: rhel8/4.18.0-553.75.1.el8_10/CVE-2025-38350-sch_htb-make-htb_qlen_notify-idempotent.patch
From: kernel-4.18.0-553.75.1.el8_10

CVE-2025-38350
Description:
sch_htb: make htb_deactivate() idempotent
CVE: https://access.redhat.com/security/cve/CVE-2025-38350
Patch: rhel8/4.18.0-553.75.1.el8_10/CVE-2025-38350-sch_htb-make-htb_deactivate-idempotent.patch
From: kernel-4.18.0-553.75.1.el8_10

CVE-2025-38350
Description:
sch_hfsc: make hfsc_qlen_notify() idempotent
CVE: https://access.redhat.com/security/cve/CVE-2025-38350
Patch: rhel8/4.18.0-553.75.1.el8_10/CVE-2025-38350-sch_hfsc-make-hfsc_qlen_notify-idempotent.patch
From: kernel-4.18.0-553.75.1.el8_10

CVE-2025-38350
Description:
sch_ets: make est_qlen_notify() idempotent
CVE: https://access.redhat.com/security/cve/CVE-2025-38350
Patch: rhel8/4.18.0-553.75.1.el8_10/CVE-2025-38350-sch_ets-make-est_qlen_notify-idempotent.patch
From: kernel-4.18.0-553.75.1.el8_10

CVE-2025-38350
Description:
sch_drr: make drr_qlen_notify() idempotent
CVE: https://access.redhat.com/security/cve/CVE-2025-38350
Patch: rhel8/4.18.0-553.75.1.el8_10/CVE-2025-38350-sch_drr-make-drr_qlen_notify-idempotent.patch
From: kernel-4.18.0-553.75.1.el8_10

CVE-2025-38350
Description:
net/sched: Always pass notifications when child class becomes empty
CVE: https://access.redhat.com/security/cve/CVE-2025-38350
Patch: rhel8/4.18.0-553.75.1.el8_10/CVE-2025-38350-net-sched-always-pass-notifications-when-child-class-becomes-empty.patch
From: kernel-4.18.0-553.75.1.el8_10

CVE-2025-38449
Description:
requires a very complex adaptation
CVE:
Patch: skipped/CVE-2025-38449.patch
From:

CVE-2025-38392
Description:
idpf: convert control queue mutex to a spinlock
CVE: https://access.redhat.com/security/cve/CVE-2025-38392
Patch: rhel8/4.18.0-553.75.1.el8_10/CVE-2025-38392-idpf-convert-control-queue-mutex-to-a-spinlock.patch
From: 4.18.0-553.75.1.el8_10

CVE-2025-38461
Description:
vsock: Fix transport_* TOCTOU
CVE: https://access.redhat.com/security/cve/CVE-2025-38461
Patch: rhel8/4.18.0-553.76.1.el8_10/CVE-2025-38461-vsock-Fix-transport_-TOCTOU.patch
From: kernel-4.18.0-553.76.1.el8_10

CVE-2025-38498
Description:
vsock: Fix transport_* TOCTOU
CVE: https://access.redhat.com/security/cve/CVE-2025-38498
Patch: rhel8/4.18.0-553.76.1.el8_10/CVE-2025-38498-do_change_type-refuse-to-operate-on-unmounted-not-ours-mounts.patch
From: kernel-4.18.0-553.76.1.el8_10

CVE-2025-38498
Description:
use uniform permission checks for all mount propagation changes
CVE: https://access.redhat.com/security/cve/CVE-2025-38498
Patch: rhel8/4.18.0-553.76.1.el8_10/CVE-2025-38498-use-uniform-permission-checks-for-all-mount-propagation-changes.patch
From: kernel-4.18.0-553.76.1.el8_10

CVE-2025-38556
Description:
HID: core: Harden s32ton() against conversion to 0 bits
CVE: https://access.redhat.com/security/cve/CVE-2025-38556
Patch: rhel8/4.18.0-553.76.1.el8_10/CVE-2025-38556-core-Harden-s32ton-against-conversion-to-0-bits.patch
From: kernel-4.18.0-553.76.1.el8_10

CVE-2025-38556
Description:
HID: core: fix shift-out-of-bounds in hid_report_raw_event
CVE: https://access.redhat.com/security/cve/CVE-2025-38556
Patch: rhel8/4.18.0-553.76.1.el8_10/CVE-2025-38556-HID-core-fix-shift-out-of-bounds-in-hid_report_raw_event.patch
From: kernel-4.18.0-553.76.1.el8_10

CVE-2025-38718
Description:
sctp: linearize cloned gso packets in sctp_rcv
CVE: https://access.redhat.com/security/cve/CVE-2025-38718
Patch: rhel8/4.18.0-553.77.1.el8_10/CVE-2025-38718-sctp-linearize-cloned-gso-packets-in-sctp-rcv.patch
From: 4.18.0-553.77.1.el8_10

CVE-2025-22026
Description:
Out of scope: not affected
CVE:
Patch: skipped/CVE-2025-22026.patch
From:

CVE-2025-37797
Description:
net_sched: hfsc: Fix a UAF vulnerability in class handling
CVE: https://access.redhat.com/security/cve/CVE-2025-37797
Patch: rhel8/4.18.0-553.77.1.el8_10/CVE-2025-37797-net_sched-hfsc-Fix-a-UAF-vulnerability-in-class-handling.patch
From: 4.18.0-553.77.1.el8_10

CVE-2022-50087
Description:
Out of scope: not affected
CVE:
Patch: skipped/CVE-2022-50087.patch
From:

CVE-2025-39730
Description:
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
CVE: https://access.redhat.com/security/cve/CVE-2025-39730
Patch: rhel8/4.18.0-553.78.1.el8_10/CVE-2025-39730-NFS-Fix-filehandle-bounds-checking-in-nfs_fh_to_dentry.patch
From: 4.18.0-553.78.1.el8_10

CVE-2025-38527
Description:
smb: client: fix use-after-free in cifs_oplock_break
CVE: https://access.redhat.com/security/cve/CVE-2025-38527
Patch: rhel8/4.18.0-553.78.1.el8_10/CVE-2025-38527-smb-client-fix-use-after-free-in-cifs_oplock_break.patch
From: 4.18.0-553.78.1.el8_10

CVE-2023-53305 CVE-2022-50386
Description:
Bluetooth: L2CAP: Fix use-after-free
CVE: https://access.redhat.com/security/cve/CVE-2022-50386
Patch: rhel8/4.18.0-553.79.1.el8_10/CVE-2023-53305-bluetooth-l2cap-fix-use-after-free.patch
From: 4.18.0-553.79.1.el8_10

CVE-2022-50228
Description:
KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
CVE: https://access.redhat.com/security/cve/CVE-2022-50228
Patch: rhel8/4.18.0-553.79.1.el8_10/CVE-2022-50228-KVM-SVM-dont-BUG-if-userspace-injects-an-interrupt.patch
From: 4.18.0-553.79.1.el8_10

CVE-2023-53373
Description:
crypto: seqiv - Handle EBUSY correctly
CVE: https://access.redhat.com/security/cve/CVE-2023-53373
Patch: rhel8/4.18.0-553.80.1.el8_10/CVE-2023-53373-crypto-seqiv-handle-ebusy-correctly.patch
From: 4.18.0-553.80.1.el8_10

CVE-2025-39751
Description:
This CVE has been rejected or withdrawn by its CVE Numbering Authority as per NVD website
CVE:
Patch: skipped/CVE-2025-39751.patch
From:

CVE-2025-39757
Description:
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
CVE: https://access.redhat.com/security/cve/CVE-2025-39757
Patch: rhel8/4.18.0-553.80.1.el8_10/CVE-2025-39757-ALSA-usb-audio-Validate-UAC3-cluster-segment-descriptors.patch
From: 4.18.0-553.80.1.el8_10

CVE-2025-39757
Description:
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
CVE: https://access.redhat.com/security/cve/CVE-2025-39757
Patch: rhel8/4.18.0-553.80.1.el8_10/CVE-2025-39757-ALSA-usb-audio-Fix-size-validation-in-convert_chmap_v3.patch
From: 4.18.0-553.80.1.el8_10

CVE-2023-53297
Description:
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
CVE: https://access.redhat.com/security/cve/CVE-2023-53297
Patch: rhel8/4.18.0-553.81.1.el8_10/CVE-2023-53297-Bluetooth-L2CAP-fix-bad-unlock-balance-in-l2cap_disconnect_rsp.patch
From: 4.18.0-553.81.1.el8_10

CVE-2025-39817
Description:
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
CVE: https://access.redhat.com/security/cve/CVE-2025-39817
Patch: rhel8/4.18.0-553.81.1.el8_10/CVE-2025-39817-efivarfs-fix-slab-out-of-bounds-in-efivarfs-d-compare.patch
From: 4.18.0-553.81.1.el8_10

CVE-2025-39841
Description:
scsi: lpfc: Fix buffer free/clear order in deferred receive path
CVE: https://access.redhat.com/security/cve/CVE-2025-39841
Patch: rhel8/4.18.0-553.81.1.el8_10/CVE-2025-39841-scsi-lpfc-fix-buffer-free-clear-order-in-deferred-receive-path.patch
From: 4.18.0-553.81.1.el8_10

CVE-2025-39849
Description:
wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
CVE: https://access.redhat.com/security/cve/CVE-2025-39849
Patch: rhel8/4.18.0-553.81.1.el8_10/CVE-2025-39849-wifi-cfg80211-sme-cap-ssid-length-in-cfg80211-connect-result.patch
From: 4.18.0-553.81.1.el8_10

CVE-2023-53386
Description:
Bluetooth: Fix potential use-after-free when clear keys
CVE: https://access.redhat.com/security/cve/CVE-2023-53386
Patch: rhel8/4.18.0-553.81.1.el8_10/CVE-2023-53386-Bluetooth-Fix-potential-use-after-free-when-clear-keys.patch
From: 4.18.0-553.81.1.el8_10

CVE-2025-39864
Description:
wifi: cfg80211: fix use-after-free in cmp_bss()
CVE: https://access.redhat.com/security/cve/CVE-2025-39864
Patch: rhel8/4.18.0-553.82.1.el8_10/CVE-2025-39864-wifi-cfg80211-fix-use-after-free-in-cmp-bss.patch
From: 4.18.0-553.82.1.el8_10

CVE-2023-53226
Description:
wifi: mwifiex: Fix OOB and integer underflow when rx packets
CVE: https://access.redhat.com/security/cve/CVE-2023-53226
Patch: rhel8/4.18.0-553.82.1.el8_10/CVE-2023-53226-wifi-mwifiex-Fix-OOB-and-integer-underflow-when-rx-packets.patch
From: 4.18.0-553.82.1.el8_10

CVE-2023-53226
Description:
wifi: mwifiex: Fix missed return in oob checks failed path
CVE: https://access.redhat.com/security/cve/CVE-2023-53226
Patch: rhel8/4.18.0-553.82.1.el8_10/CVE-2023-53226-wifi-mwifiex-Fix-missed-return-in-oob-checks-failed-path.patch
From: 4.18.0-553.82.1.el8_10

CVE-2023-53226
Description:
wifi: mwifiex: Fix OOB and integer underflow when rx packets
CVE: https://access.redhat.com/security/cve/CVE-2023-53226
Patch: rhel8/4.18.0-553.82.1.el8_10/CVE-2023-53226-wifi-mwifiex-Fix-oob-check-condition-in-mwifiex_process_rx_packet.patch
From: 4.18.0-553.82.1.el8_10

CVE-2023-53257
Description:
wifi: mac80211: check S1G action frame size
CVE: https://access.redhat.com/security/cve/CVE-2023-53257
Patch: rhel8/4.18.0-553.82.1.el8_10/CVE-2023-53257-wifi-mac80211-check-S1G-action-frame-size.patch
From: 4.18.0-553.82.1.el8_10

CVE-2022-50367
Description:
fs: fix UAF/GPF bug in nilfs_mdt_destroy
CVE: https://access.redhat.com/security/cve/CVE-2022-50367
Patch: rhel8/4.18.0-553.83.1.el8_10/CVE-2022-50367-fs-fix-uaf-gpf-bug-in-nilfs-mdt-destroy.patch
From: 4.18.0-553.83.1.el8_10

CVE-2023-53178
Description:
mm: fix zswap writeback race condition
CVE: https://access.redhat.com/security/cve/CVE-2023-53178
Patch: rhel8/4.18.0-553.83.1.el8_10/CVE-2023-53178-mm-fix-zswap-writeback-race-condition.patch
From: 4.18.0-553.83.1.el8_10

CVE-2023-53178
Description:
mm: zswap: fix missing folio cleanup in writeback race path
CVE: https://access.redhat.com/security/cve/CVE-2023-53178
Patch: rhel8/4.18.0-553.83.1.el8_10/CVE-2023-53178-mm-zswap-fix-missing-folio-cleanup-in-writeback-race-path.patch
From: 4.18.0-553.83.1.el8_10

CVE-2025-39718
Description:
vsock/virtio: Validate length in packet header before skb_put()
CVE: https://access.redhat.com/security/cve/CVE-2025-39718
Patch: rhel8/4.18.0-553.84.1.el8_10/CVE-2025-39718-vsock-virtio-validate-length-in-packet-header-before-skb-put.patch
From: 4.18.0-553.84.1.el8_10

N/A
Description:
x86 xen add xenpv restore regs and return to usermode
CVE: N/A
Patch: 4.18.0/x86-xen-Add-xenpv_restore_regs_and_return_to_usermode-el8-372.patch
From: N/A

N/A
Description:
kpatch add alt asm definitions
CVE: https://www.kernel.org
Patch: 4.18.0/kpatch-add-alt-asm-definitions-el8-372.patch
From: N/A