Skip to content
OpenAdvisories
High RHSA-2025:21128 16 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Nov 13, 2025 · Updated Aug 20, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-core 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-core 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-debuginfo 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-devel 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-kvm 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-modules 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-modules-core 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-modules-extra 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debuginfo 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-devel 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-kvm 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-modules 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-modules-core 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-modules-extra 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-core 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-core 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-debuginfo 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-devel 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-modules 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-modules-core 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-modules-extra 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debuginfo 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-devel 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-modules 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-modules-core 0:5.14.0-284.146.1.rt14.431.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-modules-extra 0:5.14.0-284.146.1.rt14.431.el9_2

Vulnerabilities 16

  • High 8.8
    CVE-2023-53226

    wifi: mwifiex: Fix OOB and integer underflow when rx packets

    In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix OOB and integer underflow when rx packets Make sure mwifiex_process_mgmt_packet, mwifiex_process_sta_rx_packet and mwifiex_process_uap_rx_packet, mwifiex_uap_queue_bridged_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2023-53305

    Bluetooth: L2CAP: Fix use-after-free

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in l2cap_le_command_rej.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.1
    CVE-2023-53213

    wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()

    In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() Fix a slab-out-of-bounds read that occurs in kmemdup() called from brcmf_get_assoc_ies(). The bug could occur when assoc_info-…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2022-50367

    fs: fix UAF/GPF bug in nilfs_mdt_destroy

    In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfs_mdt_destroy In alloc_inode, inode_init_always() could return -ENOMEM if security_inode_alloc() fails, which causes inode->i_private uninitialized. Then nilfs_is_m…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2022-50406

    iomap: iomap: fix memory corruption when recording errors during writeback

    In the Linux kernel, the following vulnerability has been resolved: iomap: iomap: fix memory corruption when recording errors during writeback Every now and then I see this crash on arm64: Unable to handle kernel NULL pointer dereference at virtual address 00…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-53178

    mm: fix zswap writeback race condition

    In the Linux kernel, the following vulnerability has been resolved: mm: fix zswap writeback race condition The zswap writeback mechanism can cause a race condition resulting in memory corruption, where a swapped out page gets swapped in with data that was wri…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-53331

    pstore/ram: Check start of empty przs during init

    In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as valid"), initialization would assume a prz was valid after seeing that …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-53373

    crypto: seqiv - Handle EBUSY correctly

    In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. Howev…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-53386

    Bluetooth: Fix potential use-after-free when clear keys

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu(…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-53494

    crypto: xts - Handle EBUSY correctly

    In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request. However, …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-38614

    eventpoll: Fix semi-unbounded recursion

    In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EP_MAX_NESTS+1 links. Currently, ep_loop_check_proc() ensures that the graph is loop-fre…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-39697

    NFS: Fix a race when updating an existing write

    In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfs_lock_and_join_requests() tests for whether the request is still attached to the mapping, nothing prevents a call to nfs_inode_remove_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2022-50356

    net: sched: sfb: fix null pointer access issue when sfb_init() fails

    In the Linux kernel, the following vulnerability has been resolved: net: sched: sfb: fix null pointer access issue when sfb_init() fails When the default qdisc is sfb, if the qdisc of dev_queue fails to be inited during mqprio_init(), sfb_reset() is invoked t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.7
    CVE-2023-53401

    mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()

    In the Linux kernel, the following vulnerability has been resolved: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() KCSAN found an issue in obj_stock_flush_required(): stock->cached_objcg can be reset between the check and dereference: …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-53185

    wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes

    In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes A bad USB device is able to construct a service connection response message with target endpoint being ENDPOINT0 which is reserved f…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53232

    mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data

    In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data The MT7921 driver no longer uses eeprom.data, but the relevant code has not been removed completely since commit 16d98b5483…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2389491
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2393481
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395267
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395297
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395322
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395358
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395420
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395858
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395880
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396114
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396152
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396379
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396417
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396419
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396538
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2400777
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21128.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-50356
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50356
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50356
  • article
    https://lore.kernel.org/linux-cve-announce/2025091714-CVE-2022-50356-fe76@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-50367
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50367
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50367
  • article
    https://lore.kernel.org/linux-cve-announce/2025091716-CVE-2022-50367-651c@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-50406
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50406
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50406
  • article
    https://git.kernel.org/stable/c/3d5f3ba1ac28059bdf7000cae2403e4e984308d2
  • article
    https://git.kernel.org/stable/c/7308591d9c7787aec58f6a01a7823f14e90db7a2
  • article
    https://git.kernel.org/stable/c/82c66c46f73b88be74c869e2cbfef45281adf3c6
  • report
    https://access.redhat.com/security/cve/CVE-2023-53178
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-53178
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-53178
  • article
    https://lore.kernel.org/linux-cve-announce/2025091555-CVE-2023-53178-9d27@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-53185
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-53185
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-53185