ALSA-2025:11298
- Source
- https://errata.almalinux.org/8/ALSA-2025-11298.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:11298.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ALSA-2025:11298
- Related
- Published
- 2025-07-16T00:00:00Z
- Modified
- 2025-07-16T12:39:32Z
- Summary
- Moderate: kernel security update
- Details
-
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: cifs: potential buffer overflow in handling symlinks (CVE-2022-49058)
- kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002)
- kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)
- kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991)
- kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004)
- kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)
- kernel: ext4: ignore xattrs past end (CVE-2025-37738)
- kernel: misc/vmwvmci: fix an infoleak in vmcihostdoreceive_datagram() (CVE-2022-49788)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2025:11298
- https://access.redhat.com/security/cve/CVE-2022-49058
- https://access.redhat.com/security/cve/CVE-2022-49788
- https://access.redhat.com/security/cve/CVE-2024-57980
- https://access.redhat.com/security/cve/CVE-2024-58002
- https://access.redhat.com/security/cve/CVE-2025-21991
- https://access.redhat.com/security/cve/CVE-2025-22004
- https://access.redhat.com/security/cve/CVE-2025-23150
- https://access.redhat.com/security/cve/CVE-2025-37738
- https://bugzilla.redhat.com/2348254
- https://bugzilla.redhat.com/2348513
- https://bugzilla.redhat.com/2348599
- https://bugzilla.redhat.com/2356917
- https://bugzilla.redhat.com/2357142
- https://bugzilla.redhat.com/2363268
- https://bugzilla.redhat.com/2363305
- https://bugzilla.redhat.com/2363378
- https://errata.almalinux.org/8/ALSA-2025-11298.html
Affected packages
AlmaLinux:8 / bpftool
Package
- Name
- bpftool
- Purl
- pkg:rpm/almalinux/bpftool
AlmaLinux:8 / kernel
Package
- Name
- kernel
- Purl
- pkg:rpm/almalinux/kernel
AlmaLinux:8 / kernel-abi-stablelists
Package
- Name
- kernel-abi-stablelists
- Purl
- pkg:rpm/almalinux/kernel-abi-stablelists
AlmaLinux:8 / kernel-core
Package
- Name
- kernel-core
- Purl
- pkg:rpm/almalinux/kernel-core
AlmaLinux:8 / kernel-cross-headers
Package
- Name
- kernel-cross-headers
- Purl
- pkg:rpm/almalinux/kernel-cross-headers
AlmaLinux:8 / kernel-debug
Package
- Name
- kernel-debug
- Purl
- pkg:rpm/almalinux/kernel-debug
AlmaLinux:8 / kernel-debug-core
Package
- Name
- kernel-debug-core
- Purl
- pkg:rpm/almalinux/kernel-debug-core
AlmaLinux:8 / kernel-debug-devel
Package
- Name
- kernel-debug-devel
- Purl
- pkg:rpm/almalinux/kernel-debug-devel
AlmaLinux:8 / kernel-debug-modules
Package
- Name
- kernel-debug-modules
- Purl
- pkg:rpm/almalinux/kernel-debug-modules
AlmaLinux:8 / kernel-debug-modules-extra
Package
- Name
- kernel-debug-modules-extra
- Purl
- pkg:rpm/almalinux/kernel-debug-modules-extra
AlmaLinux:8 / kernel-devel
Package
- Name
- kernel-devel
- Purl
- pkg:rpm/almalinux/kernel-devel
AlmaLinux:8 / kernel-doc
Package
- Name
- kernel-doc
- Purl
- pkg:rpm/almalinux/kernel-doc
AlmaLinux:8 / kernel-headers
Package
- Name
- kernel-headers
- Purl
- pkg:rpm/almalinux/kernel-headers
AlmaLinux:8 / kernel-modules
Package
- Name
- kernel-modules
- Purl
- pkg:rpm/almalinux/kernel-modules
AlmaLinux:8 / kernel-modules-extra
Package
- Name
- kernel-modules-extra
- Purl
- pkg:rpm/almalinux/kernel-modules-extra
AlmaLinux:8 / kernel-tools
Package
- Name
- kernel-tools
- Purl
- pkg:rpm/almalinux/kernel-tools
AlmaLinux:8 / kernel-tools-libs
Package
- Name
- kernel-tools-libs
- Purl
- pkg:rpm/almalinux/kernel-tools-libs
AlmaLinux:8 / kernel-tools-libs-devel
Package
- Name
- kernel-tools-libs-devel
- Purl
- pkg:rpm/almalinux/kernel-tools-libs-devel
AlmaLinux:8 / kernel-zfcpdump
Package
- Name
- kernel-zfcpdump
- Purl
- pkg:rpm/almalinux/kernel-zfcpdump
AlmaLinux:8 / kernel-zfcpdump-core
Package
- Name
- kernel-zfcpdump-core
- Purl
- pkg:rpm/almalinux/kernel-zfcpdump-core
AlmaLinux:8 / kernel-zfcpdump-devel
Package
- Name
- kernel-zfcpdump-devel
- Purl
- pkg:rpm/almalinux/kernel-zfcpdump-devel
AlmaLinux:8 / kernel-zfcpdump-modules
Package
- Name
- kernel-zfcpdump-modules
- Purl
- pkg:rpm/almalinux/kernel-zfcpdump-modules
AlmaLinux:8 / kernel-zfcpdump-modules-extra
Package
- Name
- kernel-zfcpdump-modules-extra
- Purl
- pkg:rpm/almalinux/kernel-zfcpdump-modules-extra
AlmaLinux:8 / perf
Package
- Name
- perf
- Purl
- pkg:rpm/almalinux/perf