Summary
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CVE-2025-38351)
* kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571)
* kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614)
* kernel: ipv6: reject malicious packets in ipv6_gso_segment() (CVE-2025-38572)
* kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)
* kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | kernel-abi-stablelists | 6.12.0-55.40.1.el10_0 |
| AlmaLinux · 10 | kernel-doc | 6.12.0-55.40.1.el10_0 |
Vulnerabilities 6
-
Critical 9.8
scsi: lpfc: Fix buffer free/clear order in deferred receive path
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free window by correcting the buffer release sequence in the deferred receive path. The code freed the RQ buff…
-
High 8.2
sunrpc: fix client side handling of tls alerts
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tls_alert_recv due to its assumption that there is valid data in the msghdr's iterator's kv…
-
High 7.8
ipv6: reject malicious packets in ipv6_gso_segment()
In the Linux kernel, the following vulnerability has been resolved: ipv6: reject malicious packets in ipv6_gso_segment() syzbot was able to craft a packet with very long IPv6 extension headers leading to an overflow of skb->transport_header. This 16bit field …
-
High 7.8
eventpoll: Fix semi-unbounded recursion
In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EP_MAX_NESTS+1 links. Currently, ep_loop_check_proc() ensures that the graph is loop-fre…
-
High 7.1
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe…
-
Unscored —
KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALL_FLUSH_VIRTUAL_ADDRESS_LIST and HVCALL_FLUSH_VIRTUAL_ADD…
References
-
report
https://access.redhat.com/security/cve/CVE-2025-38351
-
report
https://access.redhat.com/security/cve/CVE-2025-38571
-
report
https://access.redhat.com/security/cve/CVE-2025-38572
-
report
https://access.redhat.com/security/cve/CVE-2025-38614
-
report
https://access.redhat.com/security/cve/CVE-2025-39817
-
report
https://access.redhat.com/security/cve/CVE-2025-39841
-
report
https://bugzilla.redhat.com/2382059
-
report
https://bugzilla.redhat.com/2389480
-
report
https://bugzilla.redhat.com/2389491
-
report
https://bugzilla.redhat.com/2389517
-
report
https://bugzilla.redhat.com/2395805
-
report
https://bugzilla.redhat.com/2396944
-
advisory
https://errata.almalinux.org/10/ALSA-2025-18318.html