Red Hat Security Advisory: kernel security update

Fixed packages 160

Vulnerabilities 4

• High 7.8
  CVE-2025-38498

  do_change_type(): refuse to operate on unmounted/not ours mounts

  In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns pe…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 30, 2025
• High 7.3
  CVE-2025-39694

  s390/sclp: Fix SCCB present check

  In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed afte…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 5, 2025
• Unscored —
  CVE-2023-53125

  net: usb: smsc75xx: Limit packet length to skb->len

  In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb pa…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 2, 2025
• Unscored —
  CVE-2025-37810

  usb: dwc3: gadget: check that event count does not exceed event buffer length

  In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3_GEVNTCOUNT. There is a check for the count being zero, but not for exc…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 8, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2363686
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2365028
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2384422
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393534
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16398.json
• report
  https://access.redhat.com/security/cve/CVE-2023-53125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53125
• article
  https://lore.kernel.org/linux-cve-announce/2025050232-CVE-2023-53125-67cf@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37810
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37810
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37810
• article
  https://lore.kernel.org/linux-cve-announce/2025050816-CVE-2025-37810-57c4@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38498
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38498
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38498
• article
  https://lore.kernel.org/linux-cve-announce/2025073029-CVE-2025-38498-e3ab@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39694
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39694
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39694
• article
  https://lore.kernel.org/linux-cve-announce/2025090547-CVE-2025-39694-de23@gregkh/T