Red Hat Security Advisory: kernel security update

Fixed packages 160

Vulnerabilities 7

• Critical 9.8
  CVE-2025-38566

  sunrpc: fix handling of server side tls alerts

  In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS over TLS in tls_alert_recv() due to its assumption it can read data from the msg iterator's kv…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 19, 2025
• Critical 9.8
  CVE-2025-39841

  scsi: lpfc: Fix buffer free/clear order in deferred receive path

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free window by correcting the buffer release sequence in the deferred receive path. The code freed the RQ buff…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 19, 2025
• High 8.8
  CVE-2025-39849

  wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memory corruption so add some bounds checkin…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 19, 2025
• High 8.2
  CVE-2025-38571

  sunrpc: fix client side handling of tls alerts

  In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tls_alert_recv due to its assumption that there is valid data in the msghdr's iterator's kv…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 19, 2025
• High 7.8
  CVE-2022-50087

  firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

  In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpi_info is not set and will remain NULL until the pro…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 18, 2025
• High 7.1
  CVE-2025-39817

  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare

  In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 16, 2025
• Unscored —
  CVE-2025-22026

  nfsd: don't ignore the return code of svc_proc_register()

  In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register(). If the procfile creation fails, then the kernel wil…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 16, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2360224
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2373539
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389480
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389487
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2395805
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2396928
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2396944
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_18281.json
• report
  https://access.redhat.com/security/cve/CVE-2022-50087
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50087
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50087
• article
  https://lore.kernel.org/linux-cve-announce/2025061859-CVE-2022-50087-53b1@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-22026
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-22026
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-22026
• article
  https://lore.kernel.org/linux-cve-announce/2025041654-CVE-2025-22026-f6be@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38566
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38566
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38566
• article
  https://lore.kernel.org/linux-cve-announce/2025081908-CVE-2025-38566-edef@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38571
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38571
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38571
• article
  https://lore.kernel.org/linux-cve-announce/2025081910-CVE-2025-38571-ba2a@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39817
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39817
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39817
• article
  https://lore.kernel.org/linux-cve-announce/2025091615-CVE-2025-39817-90b7@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39841
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39841
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39841
• article
  https://lore.kernel.org/linux-cve-announce/2025091902-CVE-2025-39841-2c0f@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39849
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39849
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39849
• article
  https://lore.kernel.org/linux-cve-announce/2025091904-CVE-2025-39849-c414@gregkh/T