Red Hat Security Advisory: kernel security update

Fixed packages 160

Vulnerabilities 4

• High 7.8
  CVE-2023-53373

  crypto: seqiv - Handle EBUSY correctly

  In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. Howev…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 18, 2025
• High 7.8
  CVE-2025-38614

  eventpoll: Fix semi-unbounded recursion

  In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EP_MAX_NESTS+1 links. Currently, ep_loop_check_proc() ensures that the graph is loop-fre…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 19, 2025
• Unscored —
  CVE-2025-38556

  HID: core: Harden s32ton() against conversion to 0 bits

  In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 19, 2025
• Unscored —
  CVE-2025-39757

  ALSA: usb-audio: Validate UAC3 cluster segment descriptors

  In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declared lengths and whether they fit with the…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 11, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389456
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389491
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2394615
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2396379
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17760.json
• report
  https://access.redhat.com/security/cve/CVE-2023-53373
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53373
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53373
• article
  https://lore.kernel.org/linux-cve-announce/2025091855-CVE-2023-53373-087e@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38556
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38556
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38556
• article
  https://lore.kernel.org/linux-cve-announce/2025081905-CVE-2025-38556-521e@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38614
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38614
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38614
• article
  https://lore.kernel.org/linux-cve-announce/2025081924-CVE-2025-38614-883c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39757
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39757
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39757
• article
  https://lore.kernel.org/linux-cve-announce/2025091144-CVE-2025-39757-e212@gregkh/T