Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/kernel@4.18.0-477.135.1?arch=el8_8
purl pkg:rpm/redhat/kernel@4.18.0-477.135.1?arch=el8_8
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.5
Vulnerabilities affecting this package (7)
Vulnerability Summary Fixed by
VCID-9n5j-cp2p-qkhc
Aliases:
CVE-2025-38248
kernel: Linux kernel:A use-after-free in bridge multicast in br_multicast_port_ctx_init There are no reported fixed by versions.
VCID-edst-7exd-zud8
Aliases:
CVE-2025-40168
kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() There are no reported fixed by versions.
VCID-fjrr-1q5f-qyh2
Aliases:
CVE-2025-38180
kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem There are no reported fixed by versions.
VCID-j4pn-ck3q-byb7
Aliases:
CVE-2026-23209
kernel: macvlan: fix error recovery in macvlan_common_newlink() There are no reported fixed by versions.
VCID-m2f1-4sgc-tuhv
Aliases:
CVE-2026-23001
kernel: macvlan: fix possible UAF in macvlan_forward_source() There are no reported fixed by versions.
VCID-q7a3-cm2m-ayga
Aliases:
CVE-2025-40064
kernel: smc: Fix use-after-free in __pnet_find_base_ndev() There are no reported fixed by versions.
VCID-sct2-rhk9-v7dj
Aliases:
CVE-2025-71238
kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-24T12:27:02.280374+00:00 RedHat Importer Affected by VCID-fjrr-1q5f-qyh2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-38180.json 38.4.0
2026-04-24T12:27:01.761084+00:00 RedHat Importer Affected by VCID-9n5j-cp2p-qkhc https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-38248.json 38.4.0
2026-04-24T12:26:59.510364+00:00 RedHat Importer Affected by VCID-q7a3-cm2m-ayga https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-40064.json 38.4.0
2026-04-24T12:26:59.224483+00:00 RedHat Importer Affected by VCID-edst-7exd-zud8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-40168.json 38.4.0
2026-04-24T12:25:58.882737+00:00 RedHat Importer Affected by VCID-m2f1-4sgc-tuhv https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-23001.json 38.4.0
2026-04-24T12:25:03.509573+00:00 RedHat Importer Affected by VCID-j4pn-ck3q-byb7 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-23209.json 38.4.0
2026-04-16T13:37:52.309728+00:00 RedHat Importer Affected by VCID-sct2-rhk9-v7dj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-71238.json 38.4.0
2026-04-14T00:35:03.502238+00:00 RedHat Importer Affected by VCID-9n5j-cp2p-qkhc https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-38248.json 38.3.0
2026-04-08T19:21:04.256200+00:00 RedHat Importer Affected by VCID-fjrr-1q5f-qyh2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-38180.json 38.1.0
2026-04-08T19:21:03.995544+00:00 RedHat Importer Affected by VCID-9n5j-cp2p-qkhc https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-38248.json 38.1.0
2026-04-08T19:21:03.399515+00:00 RedHat Importer Affected by VCID-q7a3-cm2m-ayga https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-40064.json 38.1.0
2026-04-08T19:21:03.263483+00:00 RedHat Importer Affected by VCID-edst-7exd-zud8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-40168.json 38.1.0
2026-04-08T19:20:59.322955+00:00 RedHat Importer Affected by VCID-m2f1-4sgc-tuhv https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-23001.json 38.1.0
2026-04-08T19:20:57.488352+00:00 RedHat Importer Affected by VCID-j4pn-ck3q-byb7 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-23209.json 38.1.0
2026-04-08T19:20:56.451458+00:00 RedHat Importer Affected by VCID-sct2-rhk9-v7dj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-71238.json 38.1.0