Loading story…
Red Hat released kernel-rt-4.18.0-553.64.1.rt7.405.el8_10 for Red Hat Enterprise Linux 8 Real Time, Real Time for NFV, and x86_64 Extended Life Cycle 8.10. The moderate-severity update remediates CVE-2025-21905, an out-of-bounds read in the Linux iwlwifi driver caused by logging firmware strings that may not be NUL-terminated; the condition could disclose memory contents or crash an affected system.
The advisory, RHSA-2025:11851, also fixes CVE-2025-21919, which can cause scheduler-related memory corruption, and CVE-2022-49977, an ftrace NULL-pointer dereference. Red Hat rated CVE-2025-21905 at CVSS 6.0 because exploitation in its products is local and requires high privileges, while NVD and CVE.org scored it 7.1. Administrators should apply the updated real-time kernel and reboot systems for the protections to take effect.
See real exploitation activity before you spend the cycle.
7 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued Moderate-severity advisory RHSA-2025:11851 with kernel-rt 4.18.0-553.64.1.rt7.405.el8_10 for affected RHEL 8 real-time, NFV, and Extended Life Cycle deployments. The update fixes CVE-2025-21905, CVE-2025-21919 scheduler memory corruption, and CVE-2022-49977 ftrace NULL-pointer dereference; systems must be rebooted after installation.
Red Hat released RHSA-2025:11428 for Red Hat Enterprise Linux 10, providing a kernel fix for the iwlwifi out-of-bounds read vulnerability CVE-2025-21905.
Red Hat released RHSA-2025:13099 with kernel fixes for CVE-2025-21905 for RHEL 8.6 Advanced Mission Critical Update Support, Telecommunications Update Service, and Update Services for SAP Solutions.
Red Hat released RHSA-2025:13061 with a kernel fix for CVE-2025-21905 for the RHEL 8.8 Telecommunications Update Service stream.
Red Hat released RHSA-2025:12623 with a kernel fix for CVE-2025-21905 for Red Hat Enterprise Linux 8.2 Advanced Update Support.
Red Hat released RHSA-2025:12238 with a kernel fix for CVE-2025-21905 for RHEL 8.4 Advanced Mission Critical Update Support and Extended Update Support Long-Life Add-On.
Red Hat released RHSA-2025:11850, providing a Red Hat Enterprise Linux 8 kernel fix for CVE-2025-21905.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Moderate-severity kernel updates for Red Hat Enterprise Linux 8, including Real Time, Real Time for NFV, and selected Extended Life Cycle deployments, to remediate three Linux wireless-subsystem vulnerabilities. The fixes address `CVE-2023-53226`, an out-of-bounds access and integer-underflow flaw in the `mwifiex` Wi-Fi driver's received-packet handling; `CVE-2023-53257`, involving mac80211 S1G action-frame size handling; and `CVE-2025-39864`, a use-after-free vulnerability in cfg80211's `cmp_bss()` function. The standard RHEL 8 update is provided as kernel version `4.18.0-553.82.1.el8_10` for x86_64, s390x, ppc64le, and aarch64 systems, while the Real Time update is `kernel-rt-4.18.0-553.82.1.rt7.423.el8_10`. Organizations running affected RHEL 8 variants should install the applicable RHSA updates and reboot systems to load the corrected kernel.
Aug 26, 2026
Red Hat released **RHSA-2023:6901**, an Important security update for the `kernel-rt` package in Red Hat Enterprise Linux 8. The update affects RHEL for Real Time 8, Real Time for NFV 8, and RHEL for x86_64 Extended Life Cycle 8.10, remediating a broad set of kernel memory-safety, race-condition, denial-of-service, information-disclosure, and speculative-execution weaknesses. Organizations should install the applicable updated kernel package and reboot affected hosts for the protections to take effect. Notable issues addressed across the associated RHEL errata include `CVE-2023-31436`, an out-of-bounds access in traffic-control QFQ that can enable local privilege escalation; `CVE-2023-1998`, which can defeat Spectre v2 speculation protections between SMT sibling threads; and Bluetooth L2CAP flaws `CVE-2022-3640` and `CVE-2022-42895`, involving use-after-free and kernel-pointer disclosure. Other fixes cover double-free, buffer-overflow, and device-driver vulnerabilities, including `CVE-2023-1079` in the ASUS HID driver and `CVE-2023-26545` in MPLS. Where patching cannot be immediate, Red Hat documents limited mitigations such as preventing the `usb_8dev` module or affected ASUS HID driver from loading; however, applying the relevant security errata remains the recommended remediation.
Aug 26, 2026
Red Hat released Moderate-severity RHEL 8 kernel updates `4.18.0-348.el8` and real-time kernel updates `4.18.0-348.rt7.130.el8` to remediate numerous Linux kernel vulnerabilities across eBPF, networking, Bluetooth, filesystems, device drivers, memory handling, and wireless components. The advisories affect standard RHEL 8 deployments across x86_64, ARM64, IBM Z, and Power little-endian, as well as RHEL for Real Time, Real Time for NFV, related telecommunications editions, and specified x86_64 Extended Life Cycle offerings. Among the fixed issues is `CVE-2020-36158`, a buffer overflow in the Marvell `mwifiex` Wi-Fi driver’s `mwifiex_cmd_802_11_ad_hoc_start` function. A sufficiently privileged local attacker could trigger the flaw with an overly long SSID while creating an ad-hoc wireless network, potentially achieving arbitrary code execution; affected upstream kernels extend through version 5.10.4. Organizations should apply RHSA-2021:4356 or RHSA-2021:4140 as applicable and reboot systems to activate the patched kernel; blacklisting the `mwifiex` module is a mitigation where immediate patching is not possible.
Aug 28, 2026