Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 6

• Critical 9.8
  CVE-2025-38566

  sunrpc: fix handling of server side tls alerts

  In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS over TLS in tls_alert_recv() due to its assumption it can read data from the msg iterator's kv…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 19, 2025
• High 7.8
  CVE-2022-50087

  firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

  In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpi_info is not set and will remain NULL until the pro…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 18, 2025
• High 7.8
  CVE-2025-38498

  do_change_type(): refuse to operate on unmounted/not ours mounts

  In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns pe…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 30, 2025
• High 7.8
  CVE-2025-38550

  ipv6: mcast: Delay put pmc->idev in mld_del_delrec()

  In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() pmc->idev is still used in ip6_mc_clear_src(), so as mld_clear_delrec() does, the reference should be put after ip6_mc_clear_src() return.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 16, 2025
• Unscored —
  CVE-2023-53125

  net: usb: smsc75xx: Limit packet length to skb->len

  In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb pa…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 2, 2025
• Unscored —
  CVE-2025-38392

  idpf: convert control queue mutex to a spinlock

  In the Linux kernel, the following vulnerability has been resolved: idpf: convert control queue mutex to a spinlock With VIRTCHNL2_CAP_MACFILTER enabled, the following warning is generated on module load: [ 324.701677] BUG: sleeping function called from inval…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 25, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2363686
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2373539
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2383407
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2384422
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2388941
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389487
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17958.json
• report
  https://access.redhat.com/security/cve/CVE-2022-50087
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50087
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50087
• article
  https://lore.kernel.org/linux-cve-announce/2025061859-CVE-2022-50087-53b1@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-53125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53125
• article
  https://lore.kernel.org/linux-cve-announce/2025050232-CVE-2023-53125-67cf@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38392
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38392
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38392
• article
  https://lore.kernel.org/linux-cve-announce/2025072508-CVE-2025-38392-17a6@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38498
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38498
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38498
• article
  https://lore.kernel.org/linux-cve-announce/2025073029-CVE-2025-38498-e3ab@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38550
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38550
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38550
• article
  https://lore.kernel.org/linux-cve-announce/2025081628-CVE-2025-38550-9bfd@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38566
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38566
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38566
• article
  https://lore.kernel.org/linux-cve-announce/2025081908-CVE-2025-38566-edef@gregkh/T