Skip to main content
EPSS 0.1%top 96%

Red Hat Security Advisory: kernel security update

0
Medium
Published: 10/27/2025 (10/27/2025, 19:03:20 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Multiple security vulnerabilities have been identified and fixed in the Linux kernel packages used by Red Hat Enterprise Linux 10 and related distributions. These include race conditions, buffer overflows, and improper bounds checking in various kernel subsystems such as NFS, vsock/virtio, memory management, ALSA audio, and WiFi. The update addresses these issues to improve system security and stability. A system reboot is required after applying the update for changes to take effect.

Affected software

redhat/kernel
pkg:rpm/redhat/kernel
Affected versions
=10.0<10.2>=10.2

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/12/2026, 19:17:50 UTC

Technical Analysis

This Red Hat security advisory addresses several vulnerabilities in the Linux kernel, including a race condition in NFS write updates (CVE-2025-39697), validation of packet header length in vsock/virtio (CVE-2025-39718), filehandle bounds checking in NFS (CVE-2025-39730), a potential buffer overflow in memory management swap setup (CVE-2025-39727), buffer overflow in ALSA hda/ca0132 tuning control (CVE-2025-39751), and SSID length capping in WiFi cfg80211 (CVE-2025-39849). These flaws affect core kernel components and could impact system stability and security. The advisory covers Red Hat Enterprise Linux 10 and associated CodeReady Linux Builder variants across multiple architectures. The vendor has released patched kernel packages and requires a reboot to apply the fixes.

Potential Impact

The vulnerabilities include race conditions and buffer overflows that could potentially be exploited to cause system instability or unauthorized behavior within the kernel. The issues affect critical kernel subsystems such as NFS, memory management, audio drivers, and WiFi connectivity. While no known exploits are reported in the wild, these flaws could allow attackers to disrupt normal kernel operations or cause memory corruption.

Mitigation Recommendations

An official security update is available from Red Hat for affected kernel packages in Red Hat Enterprise Linux 10 and related products. Users should apply the update promptly and reboot their systems to ensure the fixes take effect. Detailed update instructions and package versions are provided in the Red Hat advisory (RHSA-2025:19106). No additional mitigation steps are indicated beyond applying the official patch and rebooting.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2025:19106
Cve Count
6
Additional Cves
["CVE-2025-39718","CVE-2025-39727","CVE-2025-39730","CVE-2025-39751","CVE-2025-39849"]

Threat ID: 6a3da1e04853345fc182b9d0

Added to database: 06/25/2026, 21:47:12 UTC

Last enriched: 08/12/2026, 19:17:50 UTC

Last updated: 09/10/2026, 19:24:56 UTC

Views: 63

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses