Skip to content
OpenAdvisories
Medium ALSA-2025:19409 3 CVEs

Moderate: kernel security update

Published Nov 3, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702)
* kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367)
* kernel: crypto: xts - Handle EBUSY correctly (CVE-2023-53494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 76

ReleasePackageFixed in
AlmaLinux · 9 kernel 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-debug 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-debug-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-debug-devel 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-debug-devel-matched 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules-extra 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-devel 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-devel-matched 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-modules 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-modules-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-64k-modules-extra 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-abi-stablelists 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-cross-headers 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-debug 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-debug-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-debug-devel 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-debug-devel-matched 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-debug-modules 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-debug-modules-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-debug-modules-extra 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-debug-uki-virt 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-devel 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-devel-matched 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-doc 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-headers 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-modules 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-modules-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-modules-extra 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-64k 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-64k-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-devel 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules-extra 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-64k-devel 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules-extra 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-debug 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-debug-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-debug-devel 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-debug-kvm 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules-extra 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-devel 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-kvm 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-modules 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-modules-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-rt-modules-extra 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-tools 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-tools-libs 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-tools-libs-devel 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-uki-virt 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-uki-virt-addons 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-zfcpdump 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-devel 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-devel-matched 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules-core 5.14.0-570.60.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules-extra 5.14.0-570.60.1.el9_6
AlmaLinux · 9 libperf 5.14.0-570.60.1.el9_6
AlmaLinux · 9 perf 5.14.0-570.60.1.el9_6
AlmaLinux · 9 python3-perf 5.14.0-570.60.1.el9_6
AlmaLinux · 9 rtla 5.14.0-570.60.1.el9_6
AlmaLinux · 9 rv 5.14.0-570.60.1.el9_6

Vulnerabilities 3

  • Critical 9.8
    CVE-2025-39702

    ipv6: sr: Fix MAC comparison to be constant-time

    In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2022-50367

    fs: fix UAF/GPF bug in nilfs_mdt_destroy

    In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfs_mdt_destroy In alloc_inode, inode_init_always() could return -ENOMEM if security_inode_alloc() fails, which causes inode->i_private uninitialized. Then nilfs_is_m…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-53494

    crypto: xts - Handle EBUSY correctly

    In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request. However, …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-50367
  • report
    https://access.redhat.com/security/cve/CVE-2023-53494
  • report
    https://access.redhat.com/security/cve/CVE-2025-39702
  • report
    https://bugzilla.redhat.com/2393533
  • report
    https://bugzilla.redhat.com/2396114
  • report
    https://bugzilla.redhat.com/2400777
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-19409.html