Red Hat Security Advisory: kernel security update

Fixed packages 160

Vulnerabilities 6

• High 8.4
  CVE-2025-39718

  vsock/virtio: Validate length in packet header before skb_put()

  In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtio_vsock_skb_rx_put(). Unf…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 5, 2025
• High 7.8
  CVE-2023-53331

  pstore/ram: Check start of empty przs during init

  In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as valid"), initialization would assume a prz was valid after seeing that …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 16, 2025
• Unscored —
  CVE-2025-22122

  block: fix adding folio to bio

  In the Linux kernel, the following vulnerability has been resolved: block: fix adding folio to bio >4GB folio is possible on some ARCHs, such as aarch64, 16GB hugepage is supported, then 'offset' of folio can't be held in 'unsigned int', cause warning in bio_…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 16, 2025
• Unscored —
  CVE-2025-39730

  NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

  In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function needs to check the minimal filehandle length before it can access the embedded filehandle.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 7, 2025
• Unscored —
  CVE-2025-39751 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Sep 11, 2025
• Unscored —
  CVE-2025-39819

  fs/smb: Fix inconsistent refcnt update

  In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in `smb2_compound_op`. Such inconsistent update could lead to possible resource leaks. Why it …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 16, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393507
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393731
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2394624
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2395806
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2395880
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19105.json
• report
  https://access.redhat.com/security/cve/CVE-2023-53331
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53331
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53331
• article
  https://lore.kernel.org/linux-cve-announce/2025091645-CVE-2023-53331-50a3@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-22122
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2360284
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-22122
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-22122
• article
  https://lore.kernel.org/linux-cve-announce/2025041628-CVE-2025-22122-c2d1@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39718
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39718
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39718
• article
  https://lore.kernel.org/linux-cve-announce/2025090551-CVE-2025-39718-2e2c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39730
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39730
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39730
• article
  https://lore.kernel.org/linux-cve-announce/2025090730-CVE-2025-39730-72c9@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39751
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39751
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39751
• article
  https://lore.kernel.org/linux-cve-announce/2025091142-CVE-2025-39751-c340@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39819
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39819
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39819
• article
  https://lore.kernel.org/linux-cve-announce/2025091615-CVE-2025-39819-d3c9@gregkh/T