Red Hat Security Advisory: kernel security update

Fixed packages 81

Vulnerabilities 10

• High 8.8
  CVE-2023-53305

  Bluetooth: L2CAP: Fix use-after-free

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in l2cap_le_command_rej.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 16, 2025
• High 7.8
  CVE-2022-50070

  mptcp: do not queue data on closed subflows

  In the Linux kernel, the following vulnerability has been resolved: mptcp: do not queue data on closed subflows Dipanjan reported a syzbot splat at close time: WARNING: CPU: 1 PID: 10818 at net/ipv4/af_inet.c:153 inet_sock_destruct+0x6d0/0x8e0 net/ipv4/af_ine…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 18, 2025
• High 7.8
  CVE-2022-50137

  RDMA/irdma: Fix a window for use-after-free

  In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a window for use-after-free During a destroy CQ an interrupt may cause processing of a CQE after CQ resources are freed by irdma_cq_free_rsrc(). Fix this by moving the call to…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 18, 2025
• High 7.8
  CVE-2025-37797

  net_sched: hfsc: Fix a UAF vulnerability in class handling

  In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-us…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 2, 2025
• Unscored —
  CVE-2022-50228

  KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

  In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 Don't BUG/WARN on interrupt injection due to GIF being cleared, since it's trivial for userspace to force the situation via KV…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 18, 2025
• Unscored —
  CVE-2023-53125

  net: usb: smsc75xx: Limit packet length to skb->len

  In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb pa…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 2, 2025
• Unscored —
  CVE-2025-22026

  nfsd: don't ignore the return code of svc_proc_register()

  In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register(). If the procfile creation fails, then the kernel wil…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 16, 2025
• Unscored —
  CVE-2025-38556

  HID: core: Harden s32ton() against conversion to 0 bits

  In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 19, 2025
• Unscored —
  CVE-2025-39730

  NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

  In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function needs to check the minimal filehandle length before it can access the embedded filehandle.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 7, 2025
• Unscored —
  CVE-2025-39751 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Sep 11, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2360224
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2363672
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2363686
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2373435
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2373514
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2373529
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389456
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393731
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2394624
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2395858
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19222.json
• report
  https://access.redhat.com/security/cve/CVE-2022-50070
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50070
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50070
• article
  https://lore.kernel.org/linux-cve-announce/2025061853-CVE-2022-50070-87b5@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-50137
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50137
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50137
• article
  https://lore.kernel.org/linux-cve-announce/2025061817-CVE-2022-50137-c539@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2022-50228
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50228
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50228
• article
  https://lore.kernel.org/linux-cve-announce/2025061849-CVE-2022-50228-3904@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-53125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53125
• article
  https://lore.kernel.org/linux-cve-announce/2025050232-CVE-2023-53125-67cf@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-53305
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53305
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53305
• article
  https://lore.kernel.org/linux-cve-announce/2025091641-CVE-2023-53305-b8fe@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-22026
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-22026
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-22026
• article
  https://lore.kernel.org/linux-cve-announce/2025041654-CVE-2025-22026-f6be@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37797
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37797
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37797