Skip to content
OpenAdvisories
Medium ALSA-2025:18281 7 CVEs

Moderate: kernel security update

Published Oct 20, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)
* kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087)
* kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571)
* kernel: sunrpc: fix handling of server side tls alerts (CVE-2025-38566)
* kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)
* kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849)
* kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 76

ReleasePackageFixed in
AlmaLinux · 9 kernel 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-debug 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-debug-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-debug-devel 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-debug-devel-matched 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules-extra 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-devel 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-devel-matched 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-modules 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-modules-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-64k-modules-extra 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-abi-stablelists 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-cross-headers 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-debug 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-debug-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-debug-devel 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-debug-devel-matched 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-debug-modules 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-debug-modules-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-debug-modules-extra 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-debug-uki-virt 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-devel 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-devel-matched 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-doc 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-headers 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-modules 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-modules-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-modules-extra 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-64k 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-64k-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-devel 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules-extra 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-64k-devel 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules-extra 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-debug 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-debug-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-debug-devel 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-debug-kvm 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules-extra 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-devel 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-kvm 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-modules 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-modules-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-rt-modules-extra 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-tools 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-tools-libs 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-tools-libs-devel 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-uki-virt 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-uki-virt-addons 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-zfcpdump 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-devel 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-devel-matched 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules-core 5.14.0-570.55.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules-extra 5.14.0-570.55.1.el9_6
AlmaLinux · 9 libperf 5.14.0-570.55.1.el9_6
AlmaLinux · 9 perf 5.14.0-570.55.1.el9_6
AlmaLinux · 9 python3-perf 5.14.0-570.55.1.el9_6
AlmaLinux · 9 rtla 5.14.0-570.55.1.el9_6
AlmaLinux · 9 rv 5.14.0-570.55.1.el9_6

Vulnerabilities 7

  • Critical 9.8
    CVE-2025-38566

    sunrpc: fix handling of server side tls alerts

    In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS over TLS in tls_alert_recv() due to its assumption it can read data from the msg iterator's kv…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2025-39841

    scsi: lpfc: Fix buffer free/clear order in deferred receive path

    In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free window by correcting the buffer release sequence in the deferred receive path. The code freed the RQ buff…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2025-39849

    wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

    In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memory corruption so add some bounds checkin…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.2
    CVE-2025-38571

    sunrpc: fix client side handling of tls alerts

    In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tls_alert_recv due to its assumption that there is valid data in the msghdr's iterator's kv…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2022-50087

    firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

    In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpi_info is not set and will remain NULL until the pro…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2025-39817

    efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare

    In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-22026

    nfsd: don't ignore the return code of svc_proc_register()

    In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register(). If the procfile creation fails, then the kernel wil…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-50087
  • report
    https://access.redhat.com/security/cve/CVE-2025-22026
  • report
    https://access.redhat.com/security/cve/CVE-2025-38566
  • report
    https://access.redhat.com/security/cve/CVE-2025-38571
  • report
    https://access.redhat.com/security/cve/CVE-2025-39817
  • report
    https://access.redhat.com/security/cve/CVE-2025-39841
  • report
    https://access.redhat.com/security/cve/CVE-2025-39849
  • report
    https://bugzilla.redhat.com/2360224
  • report
    https://bugzilla.redhat.com/2373539
  • report
    https://bugzilla.redhat.com/2389480
  • report
    https://bugzilla.redhat.com/2389487
  • report
    https://bugzilla.redhat.com/2395805
  • report
    https://bugzilla.redhat.com/2396928
  • report
    https://bugzilla.redhat.com/2396944
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-18281.html