Red Hat Security Advisory: kernel security update

Fixed packages 71

Vulnerabilities 4

• Critical 9.8
  CVE-2025-39682 Exploited Public exploit

  tls: fix handling of zero-length records on the rx_list

  In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record ha…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 5, 2025

  KEV Sep 18, 2026
• High 7.8
  CVE-2025-38718

  sctp: linearize cloned gso packets in sctp_rcv

  In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctp_rcv A cloned head skb still shares these frag skbs in fraglist with the original head skb. It's not safe to access these frag skbs. syzbot reported …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 4, 2025
• Unscored —
  CVE-2025-38556

  HID: core: Harden s32ton() against conversion to 0 bits

  In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 19, 2025
• Unscored —
  CVE-2025-39751 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Sep 11, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389456
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393166
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393511
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2394624
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19224.json
• report
  https://access.redhat.com/security/cve/CVE-2025-38556
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38556
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38556
• article
  https://lore.kernel.org/linux-cve-announce/2025081905-CVE-2025-38556-521e@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38718
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38718
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38718
• article
  https://lore.kernel.org/linux-cve-announce/2025090459-CVE-2025-38718-5bb6@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39682
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39682
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39682
• article
  https://lore.kernel.org/linux-cve-announce/2025090545-CVE-2025-39682-ddab@gregkh/T
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2025-39751
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39751
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39751
• article
  https://lore.kernel.org/linux-cve-announce/2025091142-CVE-2025-39751-c340@gregkh/T