The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843)
* kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864)
* kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955)
* kernel: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (CVE-2025-40186)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A security update for the Linux kernel in Red Hat Enterprise Linux 10.0 Extended Update Support addresses three vulnerabilities: improper capability checks in clone_private_mnt(), a race condition in iommufd during file descriptor abort, and an issue in the net tun driver related to napi->skb updates after XDP processing. These issues have been rated as important by Red Hat Product Security. The update requires a system reboot to take effect.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: smb: client: fix race with concurrent opens in rename(2) (CVE-2025-39825)
* kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955)
* kernel: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (CVE-2025-40186)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841)
* kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A security update has been released for the Linux kernel packages used in Red Hat Enterprise Linux 9 and related distributions. The update addresses two vulnerabilities: CVE-2025-39925, which implements a NETDEV_UNREGISTER notification handler in the CAN J1939 subsystem, and CVE-2025-39979, which fixes a use-after-free (UAF) vulnerability in the mlx5 network driver flow counter release. These vulnerabilities have been rated with moderate severity by Red Hat. The update requires a system reboot to take effect.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A high severity vulnerability (CVE-2025-40244) in the Linux kernel's HFS+ filesystem driver was identified and resolved. The issue involved an uninitialized value detected by Kernel Memory Sanitizer (KMSAN) in the __hfsplus_ext_cache_extent() function, which could lead to kernel panic and potentially allow an attacker with local privileges to cause denial of service or escalate privileges. The vulnerability was reported by syzbot and fixed in kernel versions after 6.12.0-rc5. No known exploits are reported in the wild.
Multiple security vulnerabilities have been identified and fixed in the Linux kernel packages used by Red Hat Enterprise Linux 10 and related products. These fixes address issues such as queue cancellation state, failure handling in NFS daemon, memory unpoisoning bugs, heap overflow in e1000e driver, linked list corruption in mt76 WiFi driver, and index validation in i40e driver configuration messages. The update is rated as having moderate security impact and requires a system reboot to take effect.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CVE-2025-39730)
* kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A moderate severity vulnerability (CVE-2024-56690) affects the Linux kernel in Red Hat Enterprise Linux 9.6 Extended Update Support. The issue involves the crypto subsystem where the crypto layer is not called directly when padata_do_parallel() returns -EBUSY, potentially causing improper handling in cryptographic operations. Red Hat has released a security update to address this issue. Systems must be rebooted after applying the update for the fix to take effect.
Multiple security vulnerabilities affecting the Linux kernel in Red Hat Enterprise Linux 9 and related products have been addressed in a security update. The issues include use-after-free bugs, race conditions, and improper handling of certain kernel operations across subsystems such as KVM, NFS, kernfs, Bluetooth, and io_uring. These vulnerabilities have been assigned CVE identifiers ranging from CVE-2025-38351 to CVE-2025-40047. The update is rated as having moderate security impact and requires a system reboot to take effect.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614)
* kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864)
* kernel: of_numa: fix uninitialized memory nodes causing kernel panic (CVE-2025-39903)
* kernel: tls: make sure to abort the stream if headers are bogus (CVE-2025-39946)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtio_vsock_skb_rx_put(). Unfortunately, virtio_vsock_skb_rx_put() uses the length from the packet header as the length argument to skb_put(), potentially resulting in SKB overflow if the host has gone wonky. Validate the length as advertised by the packet header before calling virtio_vsock_skb_rx_put().
A security advisory from Red Hat addresses multiple vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 10 and related products. The update fixes issues including race conditions, buffer overflows, use-after-free, and validation errors across various kernel subsystems such as NFS, vsock/virtio, IPv6, ALSA audio, and others. The advisory rates the overall impact as moderate and requires a system reboot after applying the update.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* microcode_ctl: From CVEorg collector (CVE-2024-28956)
* kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.