Skip to content
OpenAdvisories
High RHSA-2025:11855 5 CVEs

Red Hat Security Advisory: kernel security update

Published Jul 29, 2025 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 91

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.0 kernel 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-devel 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-devel-matched 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules-extra 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-devel 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-devel-matched 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules-extra 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-abi-stablelists 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-devel 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-devel-matched 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules-extra 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-uki-virt 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-aarch64 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-ppc64le 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-s390x 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-x86_64 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-devel 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-devel-matched 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-doc 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules-extra 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-devel 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules-extra 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-devel 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules-extra 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-devel 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-kvm 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules-extra 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-devel 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-kvm 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules-extra 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-libs 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-libs-devel 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-uki-virt 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-uki-virt-addons 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-devel 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-devel-matched 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules-core 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules-extra 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 libperf 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 libperf-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perf 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perf-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 python3-perf 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 python3-perf-debuginfo 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 rtla 0:6.12.0-55.24.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 rv 0:6.12.0-55.24.1.el10_0

Vulnerabilities 5

  • High 8.4
    CVE-2025-22121

    ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() There's issue as follows: BUG: KASAN: use-after-free in ext4_xattr_inode_dec_ref_all+0x6ff/0x790 Read of size 4 at addr ffff88807…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-37797

    net_sched: hfsc: Fix a UAF vulnerability in class handling

    In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-us…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-38110

    net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

    In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (cl…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-22091

    RDMA/mlx5: Fix page_size variable overflow

    In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix page_size variable overflow Change all variables storing mlx5_umem_mkc_find_best_pgsz() result to unsigned long to support values larger than 31 and avoid overflow. For example…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-38088

    powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap

    In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size shou…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2360186
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2360199
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2363672
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2375528
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376035
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11855.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-22091
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-22091
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-22091
  • article
    https://lore.kernel.org/linux-cve-announce/2025041617-CVE-2025-22091-462d@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-22121
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-22121
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-22121
  • article
    https://lore.kernel.org/linux-cve-announce/2025041628-CVE-2025-22121-52fd@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-37797
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-37797
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-37797
  • article
    https://lore.kernel.org/linux-cve-announce/2025050210-CVE-2025-37797-2aab@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38088
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38088
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38088
  • article
    https://lore.kernel.org/linux-cve-announce/2025063054-CVE-2025-38088-4f48@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38110
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38110
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38110
  • article
    https://lore.kernel.org/linux-cve-announce/2025070324-CVE-2025-38110-a9c0@gregkh/T