Skip to content
OpenAdvisories
High RHSA-2025:13598 7 CVEs

Red Hat Security Advisory: kernel security update

Published Aug 12, 2025 · Updated Jul 30, 2026

Ecosystem: Red Hat

Fixed packages 91

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.0 kernel 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-devel 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-devel-matched 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules-extra 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-devel 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-devel-matched 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules-extra 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-abi-stablelists 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-devel 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-devel-matched 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules-extra 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-uki-virt 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-aarch64 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-ppc64le 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-s390x 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-x86_64 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-devel 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-devel-matched 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-doc 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules-extra 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-devel 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules-extra 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-devel 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules-extra 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-devel 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-kvm 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules-extra 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-devel 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-kvm 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules-extra 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-libs 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-libs-devel 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-uki-virt 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-uki-virt-addons 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-devel 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-devel-matched 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules-core 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules-extra 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 libperf 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 libperf-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perf 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perf-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 python3-perf 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 python3-perf-debuginfo 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 rtla 0:6.12.0-55.27.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 rv 0:6.12.0-55.27.1.el10_0

Vulnerabilities 7

  • High 8.8
    CVE-2025-38292

    wifi: ath12k: fix invalid access to memory

    In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-38079

    crypto: algif_hash - fix double free in hash_accept

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. However, it is also fr…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38084

    mm/hugetlb: unshare page tables during VMA split, not before

    In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: unshare page tables during VMA split, not before Currently, __split_vma() triggers hugetlb page table unsharing through vm_ops->may_split(). This happens before the VMA lock and r…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38085

    mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race

    In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table that may have previously been shared across processes, potentially turning it into a n…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2024-56721

    x86/CPU/AMD: Terminate the erratum_1386_microcode array

    In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum_1386_microcode array The erratum_1386_microcode array requires an empty entry at the end. Otherwise x86_match_cpu_with_stepping() will continue iterate the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-38137

    PCI/pwrctrl: Cancel outstanding rescan work when unregistering

    In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when unregistering It's possible to trigger use-after-free here by: (a) forcing rescan_work_func() to take a long time and (b) utilizing a pwrctrl …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-38159

    wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

    In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_control(rtwdev, para[0], &para[1])', whi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2334820
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2373383
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2375303
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2375304
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376064
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376078
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2379219
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13598.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-56721
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-56721
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-56721
  • article
    https://lore.kernel.org/linux-cve-announce/2024122922-CVE-2024-56721-aaac@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38079
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38079
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38079
  • article
    https://lore.kernel.org/linux-cve-announce/2025061841-CVE-2025-38079-7fa5@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38084
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38084
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38084
  • article
    https://lore.kernel.org/linux-cve-announce/2025062834-CVE-2025-38084-9121@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38085
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38085
  • article
    https://lore.kernel.org/linux-cve-announce/2025062836-CVE-2025-38085-8075@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38137
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38137
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38137
  • article
    https://lore.kernel.org/linux-cve-announce/2025070332-CVE-2025-38137-d4bf@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38159
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38159
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38159
  • article
    https://lore.kernel.org/linux-cve-announce/2025070339-CVE-2025-38159-0c95@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38292
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38292
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38292
  • article
    https://lore.kernel.org/linux-cve-announce/2025071011-CVE-2025-38292-e03a@gregkh/T