Skip to content
OpenAdvisories
High RHSA-2025:11572 5 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Jul 23, 2025 · Updated Aug 6, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-core 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-core 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-debuginfo 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-devel 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-kvm 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-modules 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-modules-core 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-modules-extra 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debuginfo 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-devel 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-kvm 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-modules 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-modules-core 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-modules-extra 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-core 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-core 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-debuginfo 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-devel 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-modules 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-modules-core 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-modules-extra 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debuginfo 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-devel 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-modules 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-modules-core 0:5.14.0-284.126.1.rt14.411.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-modules-extra 0:5.14.0-284.126.1.rt14.411.el9_2

Vulnerabilities 5

  • High 8.6
    CVE-2025-22004

    net: atm: fix use after free in lec_send()

    In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.4
    CVE-2025-22121

    ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() There's issue as follows: BUG: KASAN: use-after-free in ext4_xattr_inode_dec_ref_all+0x6ff/0x790 Read of size 4 at addr ffff88807…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-23150

    ext4: fix off-by-one error in do_split

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller detected a use-after-free issue in ext4_insert_dentry that was caused by out-of-bounds access due to incorrect splitting in do_split. BUG: KAS…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-37803

    udmabuf: fix a buf size overflow issue during udmabuf creation

    In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb to u64 when calculate pglimit.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-22104

    ibmvnic: Use kernel helpers for hex dumps

    In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2357142
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2360199
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2360265
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2363268
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2365013
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11572.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-22004
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-22004
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-22004
  • article
    https://lore.kernel.org/linux-cve-announce/2025040349-CVE-2025-22004-64f9@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-22104
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-22104
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-22104
  • article
    https://lore.kernel.org/linux-cve-announce/2025041622-CVE-2025-22104-0a82@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-22121
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-22121
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-22121
  • article
    https://lore.kernel.org/linux-cve-announce/2025041628-CVE-2025-22121-52fd@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-23150
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-23150
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-23150
  • article
    https://lore.kernel.org/linux-cve-announce/2025050127-CVE-2025-23150-15b8@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-37803
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-37803
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-37803
  • article
    https://lore.kernel.org/linux-cve-announce/2025050814-CVE-2025-37803-0c5c@gregkh/T