Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 7

• Critical 9.8
  CVE-2025-39682 Exploited Public exploit

  tls: fix handling of zero-length records on the rx_list

  In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record ha…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 5, 2025

  KEV Sep 18, 2026
• High 8.4
  CVE-2025-39718

  vsock/virtio: Validate length in packet header before skb_put()

  In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtio_vsock_skb_rx_put(). Unf…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 5, 2025
• High 8.2
  CVE-2025-38571

  sunrpc: fix client side handling of tls alerts

  In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tls_alert_recv due to its assumption that there is valid data in the msghdr's iterator's kv…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 19, 2025
• High 7.8
  CVE-2023-53373

  crypto: seqiv - Handle EBUSY correctly

  In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. Howev…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 18, 2025
• High 7.8
  CVE-2025-38614

  eventpoll: Fix semi-unbounded recursion

  In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EP_MAX_NESTS+1 links. Currently, ep_loop_check_proc() ensures that the graph is loop-fre…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 19, 2025
• Unscored —
  CVE-2025-38556

  HID: core: Harden s32ton() against conversion to 0 bits

  In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 19, 2025
• Unscored —
  CVE-2025-39751 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Sep 11, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389456
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389480
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389491
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393507
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393511
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2394624
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2396379
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19104.json
• report
  https://access.redhat.com/security/cve/CVE-2023-53373
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53373
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53373
• article
  https://lore.kernel.org/linux-cve-announce/2025091855-CVE-2023-53373-087e@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38556
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38556
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38556
• article
  https://lore.kernel.org/linux-cve-announce/2025081905-CVE-2025-38556-521e@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38571
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38571
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38571
• article
  https://lore.kernel.org/linux-cve-announce/2025081910-CVE-2025-38571-ba2a@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38614
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38614
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38614
• article
  https://lore.kernel.org/linux-cve-announce/2025081924-CVE-2025-38614-883c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39682
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39682
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39682
• article
  https://lore.kernel.org/linux-cve-announce/2025090545-CVE-2025-39682-ddab@gregkh/T
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2025-39718
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39718
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39718
• article
  https://lore.kernel.org/linux-cve-announce/2025090551-CVE-2025-39718-2e2c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39751
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39751
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39751
• article
  https://lore.kernel.org/linux-cve-announce/2025091142-CVE-2025-39751-c340@gregkh/T