Skip to content
OpenAdvisories
High ALSA-2025:12753 6 CVEs

Important: kernel-rt security update

Published Aug 4, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)
* kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020)
* kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)
* kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052)
* kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)
* kernel: ext4: avoid resizing to a partial cluster size (CVE-2022-50020)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 10

ReleasePackageFixed in
AlmaLinux · 8 kernel-rt 4.18.0-553.66.1.rt7.407.el8_10
AlmaLinux · 8 kernel-rt-core 4.18.0-553.66.1.rt7.407.el8_10
AlmaLinux · 8 kernel-rt-debug 4.18.0-553.66.1.rt7.407.el8_10
AlmaLinux · 8 kernel-rt-debug-core 4.18.0-553.66.1.rt7.407.el8_10
AlmaLinux · 8 kernel-rt-debug-devel 4.18.0-553.66.1.rt7.407.el8_10
AlmaLinux · 8 kernel-rt-debug-modules 4.18.0-553.66.1.rt7.407.el8_10
AlmaLinux · 8 kernel-rt-debug-modules-extra 4.18.0-553.66.1.rt7.407.el8_10
AlmaLinux · 8 kernel-rt-devel 4.18.0-553.66.1.rt7.407.el8_10
AlmaLinux · 8 kernel-rt-modules 4.18.0-553.66.1.rt7.407.el8_10
AlmaLinux · 8 kernel-rt-modules-extra 4.18.0-553.66.1.rt7.407.el8_10

Vulnerabilities 6

  • High 8.8
    CVE-2025-38052

    net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

    In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Syzbot reported a slab-use-after-free with the following call trace: =========================================================…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-21928

    HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()

    In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handli…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-22020

    memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove

    In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove This fixes the following crash: ================================================================== BUG: KASAN: slab-us…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-37890

    net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc

    In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report [1], we have a UAF case when an hfsc class has a netem child qdisc. The crux of th…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-38079

    crypto: algif_hash - fix double free in hash_accept

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. However, it is also fr…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2022-50020

    ext4: avoid resizing to a partial cluster size

    In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary. An online resize to a size that is not integral to clust…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-50020
  • report
    https://access.redhat.com/security/cve/CVE-2025-21928
  • report
    https://access.redhat.com/security/cve/CVE-2025-22020
  • report
    https://access.redhat.com/security/cve/CVE-2025-37890
  • report
    https://access.redhat.com/security/cve/CVE-2025-38052
  • report
    https://access.redhat.com/security/cve/CVE-2025-38079
  • report
    https://bugzilla.redhat.com/2356592
  • report
    https://bugzilla.redhat.com/2360099
  • report
    https://bugzilla.redhat.com/2366848
  • report
    https://bugzilla.redhat.com/2373380
  • report
    https://bugzilla.redhat.com/2373383
  • report
    https://bugzilla.redhat.com/2373630
  • advisory
    https://errata.almalinux.org/8/ALSA-2025-12753.html