Red Hat Security Advisory: kernel security update

Fixed packages 71

Vulnerabilities 2

• High 7.8
  CVE-2025-38550

  ipv6: mcast: Delay put pmc->idev in mld_del_delrec()

  In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() pmc->idev is still used in ip6_mc_clear_src(), so as mld_clear_delrec() does, the reference should be put after ip6_mc_clear_src() return.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 16, 2025
• Unscored —
  CVE-2023-53125

  net: usb: smsc75xx: Limit packet length to skb->len

  In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb pa…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 2, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2363686
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2388941
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_18280.json
• report
  https://access.redhat.com/security/cve/CVE-2023-53125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53125
• article
  https://lore.kernel.org/linux-cve-announce/2025050232-CVE-2023-53125-67cf@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38550
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38550
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38550
• article
  https://lore.kernel.org/linux-cve-announce/2025081628-CVE-2025-38550-9bfd@gregkh/T