Skip to content
OpenAdvisories
High ALSA-2025:14510 3 CVEs

Important: kernel security update

Published Aug 25, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914)
* kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200)
* kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 2

ReleasePackageFixed in
AlmaLinux · 10 kernel-abi-stablelists 6.12.0-55.29.1.el10_0
AlmaLinux · 10 kernel-doc 6.12.0-55.29.1.el10_0

Vulnerabilities 3

  • High 7.8
    CVE-2025-37914

    net_sched: ets: Fix double list add in class with netem as child qdisc

    In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-38200

    i40e: fix MMIO write access to an invalid page in i40e_clear_hw

    In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Preven…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-38417

    ice: fix eswitch code memory leak in reset scenario

    In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-37914
  • report
    https://access.redhat.com/security/cve/CVE-2025-38200
  • report
    https://access.redhat.com/security/cve/CVE-2025-38417
  • report
    https://bugzilla.redhat.com/2367500
  • report
    https://bugzilla.redhat.com/2376392
  • report
    https://bugzilla.redhat.com/2383463
  • advisory
    https://errata.almalinux.org/10/ALSA-2025-14510.html