Red Hat Security Advisory: kpatch-patch-5_14_0-427_13_1, kpatch-patch-5_14_0-427_31_1, kpatch-patch-5_14_0-427_44_1, kpatch-patch-5_14_0-427_55_1, and kpatch-patch-5_14_0-427_68_2 security update
A security update for Red Hat Enterprise Linux 9.4 addresses a vulnerability in the kernel live patch module for kernel version 5.14.0-427.13.1.el9_4. The vulnerability (CVE-2025-38471) involves the kernel TLS implementation where the queue was not always refreshed when reading a socket. This update requires a system reboot to take effect and is rated as having an important security impact by Red Hat.
AI Analysis
Technical Summary
The vulnerability CVE-2025-38471 affects the kernel live patch module used by the kpatch utility on Red Hat Enterprise Linux 9.4 with kernel version 5.14.0-427.13.1.el9_4. The issue is in the kernel TLS code where the queue was not always refreshed when reading from a socket, potentially leading to use-after-free conditions (CWE-416). Red Hat has released multiple kpatch-patch updates to address this issue. The update requires a reboot to apply the fix. No CVSS score is provided in the advisory, but Red Hat rates the update as important.
Potential Impact
The vulnerability affects the kernel's TLS socket reading functionality, which could lead to use-after-free conditions. This may impact system stability or security when handling TLS traffic at the kernel level. The advisory does not report known exploits in the wild. The impact is rated as important by Red Hat, indicating a significant security concern but not necessarily critical.
Mitigation Recommendations
Red Hat has released updated kpatch-patch packages for kernel 5.14.0-427.13.1.el9_4 to fix this vulnerability. Users should apply the provided security updates and reboot their systems for the patch to take effect. Refer to the Red Hat advisory RHSA-2025:14811 and the update instructions at https://access.redhat.com/articles/11258 for detailed remediation steps.
Red Hat Security Advisory: kpatch-patch-5_14_0-427_13_1, kpatch-patch-5_14_0-427_31_1, kpatch-patch-5_14_0-427_44_1, kpatch-patch-5_14_0-427_55_1, and kpatch-patch-5_14_0-427_68_2 security update
Description
A security update for Red Hat Enterprise Linux 9.4 addresses a vulnerability in the kernel live patch module for kernel version 5.14.0-427.13.1.el9_4. The vulnerability (CVE-2025-38471) involves the kernel TLS implementation where the queue was not always refreshed when reading a socket. This update requires a system reboot to take effect and is rated as having an important security impact by Red Hat.
Affected software
pkg:rpm/redhat/kpatch-patch-5_14_0-427_13_1Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2025-38471 affects the kernel live patch module used by the kpatch utility on Red Hat Enterprise Linux 9.4 with kernel version 5.14.0-427.13.1.el9_4. The issue is in the kernel TLS code where the queue was not always refreshed when reading from a socket, potentially leading to use-after-free conditions (CWE-416). Red Hat has released multiple kpatch-patch updates to address this issue. The update requires a reboot to apply the fix. No CVSS score is provided in the advisory, but Red Hat rates the update as important.
Potential Impact
The vulnerability affects the kernel's TLS socket reading functionality, which could lead to use-after-free conditions. This may impact system stability or security when handling TLS traffic at the kernel level. The advisory does not report known exploits in the wild. The impact is rated as important by Red Hat, indicating a significant security concern but not necessarily critical.
Mitigation Recommendations
Red Hat has released updated kpatch-patch packages for kernel 5.14.0-427.13.1.el9_4 to fix this vulnerability. Users should apply the provided security updates and reboot their systems for the patch to take effect. Refer to the Red Hat advisory RHSA-2025:14811 and the update instructions at https://access.redhat.com/articles/11258 for detailed remediation steps.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:14811
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a419cb627e9c79719abd403
Added to database: 06/28/2026, 22:14:14 UTC
Last enriched: 06/28/2026, 22:30:57 UTC
Last updated: 06/30/2026, 20:51:24 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.