Skip to content
OpenAdvisories
Medium ALSA-2025:17760 4 CVEs

Moderate: kernel security update

Published Oct 13, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556)
* kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614)
* kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757)
* kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 76

ReleasePackageFixed in
AlmaLinux · 9 kernel 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-debug 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-debug-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-debug-devel 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-debug-devel-matched 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules-extra 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-devel 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-devel-matched 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-modules 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-modules-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-64k-modules-extra 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-abi-stablelists 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-cross-headers 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-debug 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-debug-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-debug-devel 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-debug-devel-matched 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-debug-modules 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-debug-modules-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-debug-modules-extra 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-debug-uki-virt 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-devel 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-devel-matched 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-doc 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-headers 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-modules 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-modules-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-modules-extra 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-64k 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-64k-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-devel 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules-extra 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-64k-devel 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules-extra 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-debug 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-debug-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-debug-devel 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-debug-kvm 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules-extra 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-devel 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-kvm 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-modules 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-modules-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-rt-modules-extra 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-tools 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-tools-libs 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-tools-libs-devel 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-uki-virt 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-uki-virt-addons 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-zfcpdump 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-devel 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-devel-matched 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules-core 5.14.0-570.52.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules-extra 5.14.0-570.52.1.el9_6
AlmaLinux · 9 libperf 5.14.0-570.52.1.el9_6
AlmaLinux · 9 perf 5.14.0-570.52.1.el9_6
AlmaLinux · 9 python3-perf 5.14.0-570.52.1.el9_6
AlmaLinux · 9 rtla 5.14.0-570.52.1.el9_6
AlmaLinux · 9 rv 5.14.0-570.52.1.el9_6

Vulnerabilities 4

  • High 7.8
    CVE-2023-53373

    crypto: seqiv - Handle EBUSY correctly

    In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. Howev…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-38614

    eventpoll: Fix semi-unbounded recursion

    In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EP_MAX_NESTS+1 links. Currently, ep_loop_check_proc() ensures that the graph is loop-fre…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-38556

    HID: core: Harden s32ton() against conversion to 0 bits

    In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-39757

    ALSA: usb-audio: Validate UAC3 cluster segment descriptors

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declared lengths and whether they fit with the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-53373
  • report
    https://access.redhat.com/security/cve/CVE-2025-38556
  • report
    https://access.redhat.com/security/cve/CVE-2025-38614
  • report
    https://access.redhat.com/security/cve/CVE-2025-39757
  • report
    https://bugzilla.redhat.com/2389456
  • report
    https://bugzilla.redhat.com/2389491
  • report
    https://bugzilla.redhat.com/2394615
  • report
    https://bugzilla.redhat.com/2396379
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-17760.html