Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 6

• High 7.8
  CVE-2022-50367

  fs: fix UAF/GPF bug in nilfs_mdt_destroy

  In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfs_mdt_destroy In alloc_inode, inode_init_always() could return -ENOMEM if security_inode_alloc() fails, which causes inode->i_private uninitialized. Then nilfs_is_m…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 17, 2025
• High 7.8
  CVE-2023-53178

  mm: fix zswap writeback race condition

  In the Linux kernel, the following vulnerability has been resolved: mm: fix zswap writeback race condition The zswap writeback mechanism can cause a race condition resulting in memory corruption, where a swapped out page gets swapped in with data that was wri…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 15, 2025
• High 7.8
  CVE-2023-53331

  pstore/ram: Check start of empty przs during init

  In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as valid"), initialization would assume a prz was valid after seeing that …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 16, 2025
• Medium 4.7
  CVE-2023-53401

  mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()

  In the Linux kernel, the following vulnerability has been resolved: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() KCSAN found an issue in obj_stock_flush_required(): stock->cached_objcg can be reset between the check and dereference: …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 18, 2025
• Unscored —
  CVE-2024-46679

  ethtool: check device is present when getting link settings

  In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 13, 2024
• Unscored —
  CVE-2025-39730

  NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

  In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function needs to check the minimal filehandle length before it can access the embedded filehandle.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 7, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2312067
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393731
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2395358
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2395880
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2396114
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2396417
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19886.json
• report
  https://access.redhat.com/security/cve/CVE-2022-50367
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-50367
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-50367
• article
  https://lore.kernel.org/linux-cve-announce/2025091716-CVE-2022-50367-651c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-53178
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53178
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53178
• article
  https://lore.kernel.org/linux-cve-announce/2025091555-CVE-2023-53178-9d27@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-53331
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53331
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53331
• article
  https://lore.kernel.org/linux-cve-announce/2025091645-CVE-2023-53331-50a3@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2023-53401
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53401
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53401
• article
  https://lore.kernel.org/linux-cve-announce/2025091800-CVE-2023-53401-b668@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2024-46679
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-46679
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-46679
• article
  https://lore.kernel.org/linux-cve-announce/2024091336-CVE-2024-46679-3527@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39730
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39730
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39730
• article
  https://lore.kernel.org/linux-cve-announce/2025090730-CVE-2025-39730-72c9@gregkh/T