Red Hat Security Advisory: kernel security update

Fixed packages 160

Vulnerabilities 5

• Critical 9.8
  CVE-2025-39682 Exploited Public exploit

  tls: fix handling of zero-length records on the rx_list

  In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record ha…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 5, 2025

  KEV Sep 18, 2026
• Critical 9.8
  CVE-2025-38472

  netfilter: nf_conntrack: fix crash due to removal of uninitialised entry

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry A crash in conntrack was reported while trying to unlink the conntrack entry from the hash bucket list: [exception RIP…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 28, 2025
• Critical 9.8
  CVE-2025-38527

  smb: client: fix use-after-free in cifs_oplock_break

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading to a use-after-free of the cinode structure when unmounting: cifs_oplock_break()…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 16, 2025
• High 7.8
  CVE-2025-38718

  sctp: linearize cloned gso packets in sctp_rcv

  In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctp_rcv A cloned head skb still shares these frag skbs in fraglist with the original head skb. It's not safe to access these frag skbs. syzbot reported …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 4, 2025
• High 7.8
  CVE-2025-39698

  io_uring/futex: ensure io_futex_wait() cleans up properly on failure

  In the Linux kernel, the following vulnerability has been resolved: io_uring/futex: ensure io_futex_wait() cleans up properly on failure The io_futex_data is allocated upfront and assigned to the io_kiocb async_data field, but the request isn't marked with RE…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 5, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2383916
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2388928
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393166
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393511
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393519
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16880.json
• report
  https://access.redhat.com/security/cve/CVE-2025-38472
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38472
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38472
• article
  https://lore.kernel.org/linux-cve-announce/2025072812-CVE-2025-38472-fa6d@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38527
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38527
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38527
• article
  https://lore.kernel.org/linux-cve-announce/2025081654-CVE-2025-38527-c389@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38718
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38718
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38718
• article
  https://lore.kernel.org/linux-cve-announce/2025090459-CVE-2025-38718-5bb6@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39682
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39682
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39682
• article
  https://lore.kernel.org/linux-cve-announce/2025090545-CVE-2025-39682-ddab@gregkh/T
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2025-39698
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39698
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39698
• article
  https://lore.kernel.org/linux-cve-announce/2025090548-CVE-2025-39698-41e0@gregkh/T