Red Hat Security Advisory: kernel security update

Fixed packages 160

Vulnerabilities 3

• Critical 9.8
  CVE-2025-38089 Public exploit

  sunrpc: handle SVC_GARBAGE during svc auth processing as auth error

  In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported a remotely-triggerable crash if the client sends a kernel RPC server a specially crafted packet. If d…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 30, 2025
• High 7.8
  CVE-2024-58002

  media: uvcvideo: Remove dangling pointers

  In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation. That pointer will be used when the device is done.…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 27, 2025
• High 7.8
  CVE-2025-38425

  i2c: tegra: check msg length in SMBUS block read

  In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: check msg length in SMBUS block read For SMBUS block read, do not continue to read if the message length passed from the device is '0' or greater than the maximum allowed bytes.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 25, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2348513
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2375529
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11411.json
• report
  https://access.redhat.com/security/cve/CVE-2024-58002
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-58002
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-58002
• article
  https://lore.kernel.org/linux-cve-announce/2025022654-CVE-2024-58002-6f93@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38089
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38089
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38089
• article
  https://kernelcve.org/list/?q=CVE-2025-38089
• article
  https://lore.kernel.org/linux-cve-announce/2025063055-CVE-2025-38089-0a36@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38425
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2383461
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38425
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38425
• article
  https://lore.kernel.org/linux-cve-announce/2025072555-CVE-2025-38425-d34f@gregkh/T