Skip to content
OpenAdvisories
Critical RHSA-2025:11428 6 CVEs

Red Hat Security Advisory: kernel security update

Published Jul 22, 2025 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 91

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.0 kernel 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-devel 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-devel-matched 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules-extra 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-devel 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-devel-matched 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules-extra 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-abi-stablelists 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-devel 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-devel-matched 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules-extra 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-uki-virt 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-aarch64 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-ppc64le 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-s390x 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-x86_64 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-devel 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-devel-matched 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-doc 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules-extra 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-devel 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules-extra 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-devel 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules-extra 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-devel 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-kvm 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules-extra 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-devel 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-kvm 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules-extra 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-libs 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-libs-devel 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-uki-virt 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-uki-virt-addons 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-devel 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-devel-matched 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules-core 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules-extra 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 libperf 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 libperf-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perf 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perf-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 python3-perf 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 python3-perf-debuginfo 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 rtla 0:6.12.0-55.22.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 rv 0:6.12.0-55.22.1.el10_0

Vulnerabilities 6

  • Critical 9.8
    CVE-2025-38089 Public exploit

    sunrpc: handle SVC_GARBAGE during svc auth processing as auth error

    In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported a remotely-triggerable crash if the client sends a kernel RPC server a specially crafted packet. If d…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-58002

    media: uvcvideo: Remove dangling pointers

    In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation. That pointer will be used when the device is done.…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38425

    i2c: tegra: check msg length in SMBUS block read

    In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: check msg length in SMBUS block read For SMBUS block read, do not continue to read if the message length passed from the device is '0' or greater than the maximum allowed bytes.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2025-21905

    wifi: iwlwifi: limit printed string from FW file

    In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: limit printed string from FW file There's no guarantee here that the file is always with a NUL-termination, so reading the string may read beyond the end of the TLV. If that's …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-57980

    media: uvcvideo: Fix double free in error path

    In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but doesn't reset the pointer to NULL. Thi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-37958

    mm/huge_memory: fix dereferencing invalid pmd migration entry

    In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix dereferencing invalid pmd migration entry When migrating a THP, concurrent access to the PMD migration entry during a deferred split scan can lead to an invalid address ac…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2348513
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2348599
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2356613
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2367572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2375529
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11428.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-57980
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-57980
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-57980
  • article
    https://lore.kernel.org/linux-cve-announce/2025022634-CVE-2024-57980-4b5a@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-58002
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-58002
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-58002
  • article
    https://lore.kernel.org/linux-cve-announce/2025022654-CVE-2024-58002-6f93@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-21905
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-21905
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-21905
  • article
    https://lore.kernel.org/linux-cve-announce/2025040129-CVE-2025-21905-348b@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-37958
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-37958
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-37958
  • article
    https://lore.kernel.org/linux-cve-announce/2025052003-CVE-2025-37958-02de@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38089
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38089
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38089
  • article
    https://kernelcve.org/list/?q=CVE-2025-38089
  • article
    https://lore.kernel.org/linux-cve-announce/2025063055-CVE-2025-38089-0a36@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38425
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2383461
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38425
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38425
  • article
    https://lore.kernel.org/linux-cve-announce/2025072555-CVE-2025-38425-d34f@gregkh/T