Red Hat Security Advisory: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556) * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718) * kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682) * kernel: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CVE-2025-39751) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
This advisory covers four security fixes in the Red Hat kernel-rt packages, which provide a Real Time Linux Kernel. The vulnerabilities include: (1) CVE-2025-38556, a hardening of the HID core s32ton() function to prevent conversion to zero bits; (2) CVE-2025-38718, addressing SCTP protocol handling by linearizing cloned GSO packets in sctp_rcv; (3) CVE-2025-39682, correcting TLS handling of zero-length records on the rx_list; and (4) CVE-2025-39751, fixing a buffer overflow in the ALSA hda/ca0132 add_tuning_control function. The advisory applies to Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and Extended Life Cycle versions. The vendor has released updated packages and requires a system reboot to apply the fixes.
Potential Impact
The vulnerabilities fixed by this update could potentially lead to issues such as improper data handling or buffer overflows within kernel components related to HID, SCTP networking, TLS processing, and ALSA sound drivers. The advisory rates the overall security impact as Moderate. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated kernel-rt packages that address these vulnerabilities. Users of affected Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and Extended Life Cycle versions should apply the update as detailed in the Red Hat advisory (https://access.redhat.com/articles/11258). A system reboot is required for the update to take effect. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: kernel-rt security update
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556) * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718) * kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682) * kernel: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CVE-2025-39751) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers four security fixes in the Red Hat kernel-rt packages, which provide a Real Time Linux Kernel. The vulnerabilities include: (1) CVE-2025-38556, a hardening of the HID core s32ton() function to prevent conversion to zero bits; (2) CVE-2025-38718, addressing SCTP protocol handling by linearizing cloned GSO packets in sctp_rcv; (3) CVE-2025-39682, correcting TLS handling of zero-length records on the rx_list; and (4) CVE-2025-39751, fixing a buffer overflow in the ALSA hda/ca0132 add_tuning_control function. The advisory applies to Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and Extended Life Cycle versions. The vendor has released updated packages and requires a system reboot to apply the fixes.
Potential Impact
The vulnerabilities fixed by this update could potentially lead to issues such as improper data handling or buffer overflows within kernel components related to HID, SCTP networking, TLS processing, and ALSA sound drivers. The advisory rates the overall security impact as Moderate. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated kernel-rt packages that address these vulnerabilities. Users of affected Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and Extended Life Cycle versions should apply the update as detailed in the Red Hat advisory (https://access.redhat.com/articles/11258). A system reboot is required for the update to take effect. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:19223
- Cve Count
- 4
- Additional Cves
- ["CVE-2025-38718","CVE-2025-39682","CVE-2025-39751"]
- Cvss Version
- null
Threat ID: 6a3da1df4853345fc182b41c
Added to database: 06/25/2026, 21:47:11 UTC
Last enriched: 06/25/2026, 22:27:01 UTC
Last updated: 07/01/2026, 14:51:10 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.