Linux · Security advisory · July 28, 2025

RHSA-2025:15005: kernel security update

RHSA-2025:15005, released July 28, 2025, fixes 6 CVEs in kernel (version 6.12.0-55.30.1.el10_0). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0046
40th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelRHEL 106.12.0-55.30.1.el10_0

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-38472 netfilter: nf_conntrack: fix crash due to removal of uninitialised entry 7.5 0.0046 None reported
High CVE-2025-38211 RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction 7.8 0.0041 None reported
High CVE-2025-22058 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... 7.3 0.0023 None reported
High CVE-2025-37823 net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too 7.8 0.0023 None reported
High CVE-2025-38464 tipc: Fix use-after-free in tipc_conn_close(). 7.8 0.0022 None reported
High CVE-2025-38461 vsock: Fix transport_* TOCTOU 7.8 0.0014 None reported
Showing 1 to 6 of 6 1