Skip to content
OpenAdvisories
Critical RHSA-2025:21084 12 CVEs

Red Hat Security Advisory: kernel security update

Published Nov 12, 2025 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 81

ReleasePackageFixed in
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos bpftool 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos bpftool-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-abi-stablelists 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-core 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-core 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-devel 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-modules 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-modules-extra 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debuginfo-common-x86_64 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-devel 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-doc 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-modules 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-modules-extra 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools-libs 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos perf 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos perf-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-perf 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-perf-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos bpftool 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos bpftool-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-abi-stablelists 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-core 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debug 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debug-core 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debug-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debug-devel 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debug-modules 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debug-modules-extra 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debuginfo-common-aarch64 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debuginfo-common-ppc64le 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debuginfo-common-s390x 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-debuginfo-common-x86_64 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-devel 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-doc 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-modules 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-modules-extra 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-tools 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-tools-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-tools-libs 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-zfcpdump 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-zfcpdump-core 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-zfcpdump-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-zfcpdump-devel 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-zfcpdump-modules 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos kernel-zfcpdump-modules-extra 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos perf 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos perf-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python3-perf 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python3-perf-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos bpftool 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos bpftool-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-abi-stablelists 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-core 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debug 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debug-core 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debug-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debug-devel 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debug-modules 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debug-modules-extra 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-debuginfo-common-x86_64 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-devel 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-doc 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-modules 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-modules-extra 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-tools 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-tools-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos kernel-tools-libs 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos perf 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos perf-debuginfo 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python3-perf 0:4.18.0-372.168.1.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python3-perf-debuginfo 0:4.18.0-372.168.1.el8_6

Vulnerabilities 12

  • Critical 9.8
    CVE-2025-39841

    scsi: lpfc: Fix buffer free/clear order in deferred receive path

    In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free window by correcting the buffer release sequence in the deferred receive path. The code freed the RQ buff…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2025-39864

    wifi: cfg80211: fix use-after-free in cmp_bss()

    In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in commit 776b3580178f ("cfg80211: track hidden SSID networks properly"), adjust cfg80211_update_known_bs…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.1
    CVE-2023-53213

    wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()

    In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() Fix a slab-out-of-bounds read that occurs in kmemdup() called from brcmf_get_assoc_ies(). The bug could occur when assoc_info-…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2022-50367

    fs: fix UAF/GPF bug in nilfs_mdt_destroy

    In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfs_mdt_destroy In alloc_inode, inode_init_always() could return -ENOMEM if security_inode_alloc() fails, which causes inode->i_private uninitialized. Then nilfs_is_m…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2022-50406

    iomap: iomap: fix memory corruption when recording errors during writeback

    In the Linux kernel, the following vulnerability has been resolved: iomap: iomap: fix memory corruption when recording errors during writeback Every now and then I see this crash on arm64: Unable to handle kernel NULL pointer dereference at virtual address 00…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2022-50408

    wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()

    In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() > ret = brcmf_proto_tx_queue_data(drvr, ifp->ifidx, skb); may be schedule, and then complete before the line > ndev->stats.…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-53178

    mm: fix zswap writeback race condition

    In the Linux kernel, the following vulnerability has been resolved: mm: fix zswap writeback race condition The zswap writeback mechanism can cause a race condition resulting in memory corruption, where a swapped out page gets swapped in with data that was wri…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-53373

    crypto: seqiv - Handle EBUSY correctly

    In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. Howev…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-53386

    Bluetooth: Fix potential use-after-free when clear keys

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu(…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-48701

    ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and the number of it's interfaces less tha…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-50050

    ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf()

    In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() snprintf() returns the would-be-filled size when the string overflows the given buffer size, hence using this value may resu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53185

    wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes

    In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes A bad USB device is able to construct a service connection response message with target endpoint being ENDPOINT0 which is reserved f…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278950
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2373423
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395267
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395297
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395358
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396114
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396379
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396419
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396506
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396538
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396934
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396944
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21084.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-48701
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-48701
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-48701
  • report
    https://access.redhat.com/security/cve/CVE-2022-50050
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50050
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50050
  • article
    https://lore.kernel.org/linux-cve-announce/2025061845-CVE-2022-50050-f90d@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-50367
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50367
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50367
  • article
    https://lore.kernel.org/linux-cve-announce/2025091716-CVE-2022-50367-651c@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-50406
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50406
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50406
  • article
    https://git.kernel.org/stable/c/3d5f3ba1ac28059bdf7000cae2403e4e984308d2
  • article
    https://git.kernel.org/stable/c/7308591d9c7787aec58f6a01a7823f14e90db7a2
  • article
    https://git.kernel.org/stable/c/82c66c46f73b88be74c869e2cbfef45281adf3c6
  • report
    https://access.redhat.com/security/cve/CVE-2022-50408
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50408
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50408
  • article
    https://lore.kernel.org/linux-cve-announce/2025091853-CVE-2022-50408-5835@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-53178
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-53178
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-53178
  • article
    https://lore.kernel.org/linux-cve-announce/2025091555-CVE-2023-53178-9d27@gregkh/T