Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2025:16904 6 CVEs

Red Hat Security Advisory: kernel security update

Published Sep 29, 2025 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 91

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.0 kernel 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-devel 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-devel-matched 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules-extra 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-devel 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-devel-matched 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules-extra 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-abi-stablelists 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-devel 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-devel-matched 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules-extra 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-uki-virt 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-aarch64 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-ppc64le 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-s390x 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-x86_64 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-devel 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-devel-matched 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-doc 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules-extra 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-devel 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules-extra 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-devel 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules-extra 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-devel 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-kvm 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules-extra 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-devel 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-kvm 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules-extra 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-libs 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-libs-devel 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-uki-virt 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-uki-virt-addons 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-devel 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-devel-matched 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules-core 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules-extra 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 libperf 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 libperf-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perf 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perf-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 python3-perf 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 python3-perf-debuginfo 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 rtla 0:6.12.0-55.37.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 rv 0:6.12.0-55.37.1.el10_0

Vulnerabilities 6

  • Critical 9.8
    CVE-2025-39682 Exploited Public exploit

    tls: fix handling of zero-length records on the rx_list

    In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record ha…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Sep 18, 2026
  • Critical 9.8
    CVE-2025-38527

    smb: client: fix use-after-free in cifs_oplock_break

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading to a use-after-free of the cinode structure when unmounting: cifs_oplock_break()…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38396

    fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass

    In the Linux kernel, the following vulnerability has been resolved: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass Export anon_inode_make_secure_inode() to allow KVM guest_memfd to create anonymous inodes with proper security context. …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-39698

    io_uring/futex: ensure io_futex_wait() cleans up properly on failure

    In the Linux kernel, the following vulnerability has been resolved: io_uring/futex: ensure io_futex_wait() cleans up properly on failure The io_futex_data is allocated upfront and assigned to the io_kiocb async_data field, but the request isn't marked with RE…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2025-38523

    cifs: Fix the smbd_response slab to allow usercopy

    In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbd_response slab to allow usercopy The handling of received data in the smbdirect client code involves using copy_to_iter() to copy data from the smbd_reponse struct's packet …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.3
    CVE-2025-39694

    s390/sclp: Fix SCCB present check

    In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed afte…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2383441
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2388928
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2388948
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2393511
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2393519
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2393534
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16904.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-38396
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38396
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38396
  • article
    https://lore.kernel.org/linux-cve-announce/2025072509-CVE-2025-38396-92a5@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38523
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38523
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38523
  • article
    https://lore.kernel.org/linux-cve-announce/2025081652-CVE-2025-38523-b126@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38527
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38527
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38527
  • article
    https://lore.kernel.org/linux-cve-announce/2025081654-CVE-2025-38527-c389@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-39682
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-39682
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-39682
  • article
    https://lore.kernel.org/linux-cve-announce/2025090545-CVE-2025-39682-ddab@gregkh/T
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2025-39694
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-39694
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-39694
  • article
    https://lore.kernel.org/linux-cve-announce/2025090547-CVE-2025-39694-de23@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-39698
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-39698
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-39698
  • article
    https://lore.kernel.org/linux-cve-announce/2025090548-CVE-2025-39698-41e0@gregkh/T