Skip to content
OpenAdvisories
Medium ALSA-2025:16398 4 CVEs

Moderate: kernel security update

Published Sep 22, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: net: usb: smsc75xx: Limit packet length to skb->len (CVE-2023-53125)
* kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length (CVE-2025-37810)
* kernel: do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498)
* kernel: s390/sclp: Fix SCCB present check (CVE-2025-39694)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 76

ReleasePackageFixed in
AlmaLinux · 9 kernel 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-debug 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-debug-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-debug-devel 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-debug-devel-matched 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules-extra 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-devel 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-devel-matched 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-modules 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-modules-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-64k-modules-extra 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-abi-stablelists 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-cross-headers 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-debug 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-debug-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-debug-devel 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-debug-devel-matched 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-debug-modules 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-debug-modules-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-debug-modules-extra 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-debug-uki-virt 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-devel 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-devel-matched 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-doc 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-headers 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-modules 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-modules-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-modules-extra 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-64k 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-64k-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-devel 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules-extra 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-64k-devel 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules-extra 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-debug 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-debug-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-debug-devel 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-debug-kvm 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules-extra 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-devel 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-kvm 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-modules 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-modules-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-rt-modules-extra 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-tools 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-tools-libs 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-tools-libs-devel 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-uki-virt 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-uki-virt-addons 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-zfcpdump 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-devel 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-devel-matched 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules-core 5.14.0-570.46.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules-extra 5.14.0-570.46.1.el9_6
AlmaLinux · 9 libperf 5.14.0-570.46.1.el9_6
AlmaLinux · 9 perf 5.14.0-570.46.1.el9_6
AlmaLinux · 9 python3-perf 5.14.0-570.46.1.el9_6
AlmaLinux · 9 rtla 5.14.0-570.46.1.el9_6
AlmaLinux · 9 rv 5.14.0-570.46.1.el9_6

Vulnerabilities 4

  • High 7.8
    CVE-2025-38498

    do_change_type(): refuse to operate on unmounted/not ours mounts

    In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns pe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.3
    CVE-2025-39694

    s390/sclp: Fix SCCB present check

    In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed afte…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53125

    net: usb: smsc75xx: Limit packet length to skb->len

    In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb pa…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-37810

    usb: dwc3: gadget: check that event count does not exceed event buffer length

    In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3_GEVNTCOUNT. There is a check for the count being zero, but not for exc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-53125
  • report
    https://access.redhat.com/security/cve/CVE-2025-37810
  • report
    https://access.redhat.com/security/cve/CVE-2025-38498
  • report
    https://access.redhat.com/security/cve/CVE-2025-39694
  • report
    https://bugzilla.redhat.com/2363686
  • report
    https://bugzilla.redhat.com/2365028
  • report
    https://bugzilla.redhat.com/2384422
  • report
    https://bugzilla.redhat.com/2393534
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-16398.html