Technical Summary

This advisory covers multiple security fixes in the Linux kernel, including CVE-2025-68183 which addresses an issue in the IMA subsystem where the IMA_DIGSIG flag was improperly cleared when setting or removing non-IMA extended attributes. Other vulnerabilities fixed include overflow in asymmetric key ID generation, out-of-bounds reads in SMB client, validation of nested VLAN headers, and various memory management and driver issues. These vulnerabilities affect a wide range of kernel subsystems and architectures. The fixes are included in updated kernel packages for Red Hat Enterprise Linux and Ubuntu distributions. The vendor advisory confirms that these updates mitigate the vulnerabilities and require system reboot and module recompilation due to ABI changes.