Skip to content
OpenAdvisories
High ALSA-2025:9080 7 CVEs

Important: kernel security update

Published Jun 16, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961)
* kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CVE-2025-21969)
* kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963)
* kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979)
* kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999)
* kernel: md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126)
* kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 76

ReleasePackageFixed in
AlmaLinux · 9 kernel 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-debug 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-debug-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-debug-devel 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-debug-devel-matched 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-debug-modules-extra 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-devel 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-devel-matched 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-modules 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-modules-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-64k-modules-extra 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-abi-stablelists 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-cross-headers 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-debug 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-debug-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-debug-devel 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-debug-devel-matched 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-debug-modules 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-debug-modules-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-debug-modules-extra 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-debug-uki-virt 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-devel 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-devel-matched 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-doc 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-headers 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-modules 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-modules-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-modules-extra 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-64k 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-64k-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-devel 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-64k-debug-modules-extra 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-64k-devel 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-64k-modules-extra 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-debug 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-debug-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-debug-devel 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-debug-kvm 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-debug-modules-extra 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-devel 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-kvm 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-modules 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-modules-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-rt-modules-extra 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-tools 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-tools-libs 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-tools-libs-devel 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-uki-virt 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-uki-virt-addons 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-zfcpdump 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-devel 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-devel-matched 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules-core 5.14.0-570.22.1.el9_6
AlmaLinux · 9 kernel-zfcpdump-modules-extra 5.14.0-570.22.1.el9_6
AlmaLinux · 9 libperf 5.14.0-570.22.1.el9_6
AlmaLinux · 9 perf 5.14.0-570.22.1.el9_6
AlmaLinux · 9 python3-perf 5.14.0-570.22.1.el9_6
AlmaLinux · 9 rtla 5.14.0-570.22.1.el9_6
AlmaLinux · 9 rv 5.14.0-570.22.1.el9_6

Vulnerabilities 7

  • Critical 9.8
    CVE-2025-37750

    smb: client: fix UAF in decryption with multichannel

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 ("smb: client: allocate crypto only for primary server") and commit b0abcd65ec54 ("smb: client: fix UAF in async…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2025-21969

    Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd After the hci sync command releases l2cap_conn, the hci receive data work queue references the released l2cap_conn when sendin…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-21979

    wifi: cfg80211: cancel wiphy_work before freeing wiphy

    In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphy_work before freeing wiphy A wiphy_work can be queued from the moment the wiphy is allocated and initialized (i.e. wiphy_new_nm). When a wiphy_work is queued, the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-21999

    proc: fix UAF in proc_get_inode()

    In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation. The bug is that pde->proc_ops don't belong to /proc, it belongs to a module, therefore dereferenc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2025-21961

    eth: bnxt: fix truesize for mb-xdp-pass case

    In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix truesize for mb-xdp-pass case When mb-xdp is set and return is XDP_PASS, packet is converted from xdp_buff to sk_buff with xdp_update_skb_shared_info() in bnxt_xdp_build_skb().…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2025-21963

    cifs: Fix integer overflow while processing acdirmax mount option

    In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option User-provided mount parameter acdirmax of type u32 is intended to have an upper limit, but before it is validated, the value …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-22126

    md: fix mddev uaf while iterating all_mddevs list

    In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating all_mddevs list While iterating all_mddevs list from md_notify_reboot() and md_exit(), list_for_each_entry_safe is used, and this can race with deletint the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-21961
  • report
    https://access.redhat.com/security/cve/CVE-2025-21963
  • report
    https://access.redhat.com/security/cve/CVE-2025-21969
  • report
    https://access.redhat.com/security/cve/CVE-2025-21979
  • report
    https://access.redhat.com/security/cve/CVE-2025-21999
  • report
    https://access.redhat.com/security/cve/CVE-2025-22126
  • report
    https://access.redhat.com/security/cve/CVE-2025-37750
  • report
    https://bugzilla.redhat.com/2356584
  • report
    https://bugzilla.redhat.com/2356633
  • report
    https://bugzilla.redhat.com/2356642
  • report
    https://bugzilla.redhat.com/2356652
  • report
    https://bugzilla.redhat.com/2357134
  • report
    https://bugzilla.redhat.com/2360236
  • report
    https://bugzilla.redhat.com/2363341
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-9080.html