Skip to content
OpenAdvisories
Critical RHSA-2025:19103 6 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Oct 28, 2025 · Updated Aug 6, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-core 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug-core 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug-debuginfo 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug-devel 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug-kvm 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug-modules 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debug-modules-extra 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debuginfo 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-debuginfo-common-x86_64 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-devel 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-kvm 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-modules 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::nfv kernel-rt-modules-extra 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-core 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debug 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debug-core 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debug-debuginfo 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debug-devel 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debug-modules 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debug-modules-extra 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debuginfo 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-debuginfo-common-x86_64 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-devel 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-modules 0:4.18.0-553.81.1.rt7.422.el8_10
Red Hat · RHEL 8 enterprise_linux:8::realtime kernel-rt-modules-extra 0:4.18.0-553.81.1.rt7.422.el8_10

Vulnerabilities 6

  • Critical 9.8
    CVE-2025-39841

    scsi: lpfc: Fix buffer free/clear order in deferred receive path

    In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free window by correcting the buffer release sequence in the deferred receive path. The code freed the RQ buff…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2022-50386

    Bluetooth: L2CAP: Fix user-after-free

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix user-after-free This uses l2cap_chan_hold_unless_zero() after calling __l2cap_get_chan_blah() to prevent the following trace: Bluetooth: l2cap_core.c:static void l2cap_c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2023-53297

    Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_scid returns NULL, then 'bad unlock balan…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2025-39849

    wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

    In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memory corruption so add some bounds checkin…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-53386

    Bluetooth: Fix potential use-after-free when clear keys

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu(…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2025-39817

    efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare

    In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395681
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395805
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396419
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396431
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396928
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396944
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19103.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-50386
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50386
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50386
  • article
    https://lore.kernel.org/linux-cve-announce/2025091852-CVE-2022-50386-07d7@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-53297
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-53297
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-53297
  • article
    https://lore.kernel.org/linux-cve-announce/2025091627-CVE-2023-53297-8746@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-53386
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-53386
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-53386
  • article
    https://lore.kernel.org/linux-cve-announce/2025091857-CVE-2023-53386-8ab2@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-39817
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-39817
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-39817
  • article
    https://lore.kernel.org/linux-cve-announce/2025091615-CVE-2025-39817-90b7@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-39841
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-39841
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-39841
  • article
    https://lore.kernel.org/linux-cve-announce/2025091902-CVE-2025-39841-2c0f@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-39849
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-39849
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-39849
  • article
    https://lore.kernel.org/linux-cve-announce/2025091904-CVE-2025-39849-c414@gregkh/T