Skip to content
OpenAdvisories
Medium ALSA-2025:9896 3 CVEs

Moderate: kernel security update

Published Jun 30, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883)
* kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961)
* kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 2

ReleasePackageFixed in
AlmaLinux · 10 kernel-abi-stablelists 6.12.0-55.19.1.el10_0
AlmaLinux · 10 kernel-doc 6.12.0-55.19.1.el10_0

Vulnerabilities 3

  • High 7.5
    CVE-2025-21961

    eth: bnxt: fix truesize for mb-xdp-pass case

    In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix truesize for mb-xdp-pass case When mb-xdp is set and return is XDP_PASS, packet is converted from xdp_buff to sk_buff with xdp_update_skb_shared_info() in bnxt_xdp_build_skb().…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-21883

    ice: Fix deinitializing VF in error path

    In the Linux kernel, the following vulnerability has been resolved: ice: Fix deinitializing VF in error path If ice_ena_vfs() fails after calling ice_create_vf_entries(), it frees all VFs without removing them from snapshot PF-VF mailbox list, leading to list…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-22104

    ibmvnic: Use kernel helpers for hex dumps

    In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-21883
  • report
    https://access.redhat.com/security/cve/CVE-2025-21961
  • report
    https://access.redhat.com/security/cve/CVE-2025-22104
  • report
    https://bugzilla.redhat.com/2355415
  • report
    https://bugzilla.redhat.com/2356584
  • report
    https://bugzilla.redhat.com/2360265
  • advisory
    https://errata.almalinux.org/10/ALSA-2025-9896.html