Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Linux Kernel Patches Vulnerability: Unauthorized Access

published 1 year ago

Summary

Red Hat Linux kernel patches contain a vulnerability that could allow an attacker to gain unauthorized access to a system. This affects Red Hat Enterprise Linux systems and requires patching to ensure system security. Apply the latest patches to fix the issue.

What to do

Update redhat kpatch-patch-5_14_0-284_104_1 to version 0:1-8.el9_2.
Update redhat kpatch-patch-5_14_0-284_104_1-debuginfo to version 0:1-8.el9_2.
Update redhat kpatch-patch-5_14_0-284_104_1-debugsource to version 0:1-8.el9_2.
Update redhat kpatch-patch-5_14_0-284_117_1 to version 0:1-5.el9_2.
Update redhat kpatch-patch-5_14_0-284_117_1-debuginfo to version 0:1-5.el9_2.
Update redhat kpatch-patch-5_14_0-284_117_1-debugsource to version 0:1-5.el9_2.
Update redhat kpatch-patch-5_14_0-284_134_1 to version 0:1-1.el9_2.
Update redhat kpatch-patch-5_14_0-284_134_1-debuginfo to version 0:1-1.el9_2.
Update redhat kpatch-patch-5_14_0-284_134_1-debugsource to version 0:1-1.el9_2.
Update redhat kpatch-patch-5_14_0-284_79_1 to version 0:1-12.el9_2.
Update redhat kpatch-patch-5_14_0-284_79_1-debuginfo to version 0:1-12.el9_2.
Update redhat kpatch-patch-5_14_0-284_79_1-debugsource to version 0:1-12.el9_2.
Update redhat kpatch-patch-5_14_0-284_92_1 to version 0:1-10.el9_2.
Update redhat kpatch-patch-5_14_0-284_92_1-debuginfo to version 0:1-10.el9_2.
Update redhat kpatch-patch-5_14_0-284_92_1-debugsource to version 0:1-10.el9_2.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_104_1	< 0:1-8.el9_2 Fix: upgrade to 0:1-8.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_104_1-debuginfo	< 0:1-8.el9_2 Fix: upgrade to 0:1-8.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_104_1-debugsource	< 0:1-8.el9_2 Fix: upgrade to 0:1-8.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_117_1	< 0:1-5.el9_2 Fix: upgrade to 0:1-5.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_117_1-debuginfo	< 0:1-5.el9_2 Fix: upgrade to 0:1-5.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_117_1-debugsource	< 0:1-5.el9_2 Fix: upgrade to 0:1-5.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_134_1	< 0:1-1.el9_2 Fix: upgrade to 0:1-1.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_134_1-debuginfo	< 0:1-1.el9_2 Fix: upgrade to 0:1-1.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_134_1-debugsource	< 0:1-1.el9_2 Fix: upgrade to 0:1-1.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_79_1	< 0:1-12.el9_2 Fix: upgrade to 0:1-12.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_79_1-debuginfo	< 0:1-12.el9_2 Fix: upgrade to 0:1-12.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_79_1-debugsource	< 0:1-12.el9_2 Fix: upgrade to 0:1-12.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_92_1	< 0:1-10.el9_2 Fix: upgrade to 0:1-10.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_92_1-debuginfo	< 0:1-10.el9_2 Fix: upgrade to 0:1-10.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_92_1-debugsource	< 0:1-10.el9_2 Fix: upgrade to 0:1-10.el9_2

Original advisory text

Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_79_1, and kpatch-patch-5_14_0-284_92_1 security update

References

https://access.redhat.com/errata/RHSA-2025:15931 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2373380 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2382581 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15931.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-38052 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-38052 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-38052 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2025061832-CVE-2025-38052-6201@gregkh... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-38352 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-38352 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-38352 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2025072229-CVE-2025-38352-f1de@gregkh... Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.8 High

Timeline

Published17 Sep 2025

Updated1 Aug 2026

First seen1 Aug 2026

Sources

RHSA-2025:15931 · OSV

Track software like this

Free during beta