Skip to content
OpenAdvisories
Critical RHSA-2025:23947 11 CVEs

Red Hat Security Advisory: kernel security update

Published Dec 23, 2025 · Updated Aug 20, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · RHEL 7 ELS rhel_els:7 bpftool 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 bpftool-debuginfo 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-abi-whitelists 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-bootwrapper 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debug 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debug-debuginfo 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debug-devel 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo-common-ppc64 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo-common-ppc64le 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo-common-s390x 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo-common-x86_64 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-devel 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-doc 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-kdump 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-kdump-debuginfo 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-kdump-devel 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-tools 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-tools-debuginfo 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-tools-libs 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-tools-libs-devel 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 perf 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 perf-debuginfo 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 python-perf 0:3.10.0-1160.144.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 python-perf-debuginfo 0:3.10.0-1160.144.1.el7

Vulnerabilities 11

  • Critical 9.8
    CVE-2022-50410

    NFSD: Protect against send buffer overflow in NFSv2 READ

    In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining the RPC receive and send buffer…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2023-53297

    Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_scid returns NULL, then 'bad unlock balan…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2023-53322

    scsi: qla2xxx: Wait for io return on terminate rport

    In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Wait for io return on terminate rport System crash due to use after free. Current code allows terminate_rport_io to exit before making sure all IOs has returned. For FCP-2 devi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2022-50367

    fs: fix UAF/GPF bug in nilfs_mdt_destroy

    In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfs_mdt_destroy In alloc_inode, inode_init_always() could return -ENOMEM if security_inode_alloc() fails, which causes inode->i_private uninitialized. Then nilfs_is_m…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2022-50406

    iomap: iomap: fix memory corruption when recording errors during writeback

    In the Linux kernel, the following vulnerability has been resolved: iomap: iomap: fix memory corruption when recording errors during writeback Every now and then I see this crash on arm64: Unable to handle kernel NULL pointer dereference at virtual address 00…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-53178

    mm: fix zswap writeback race condition

    In the Linux kernel, the following vulnerability has been resolved: mm: fix zswap writeback race condition The zswap writeback mechanism can cause a race condition resulting in memory corruption, where a swapped out page gets swapped in with data that was wri…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2022-50356

    net: sched: sfb: fix null pointer access issue when sfb_init() fails

    In the Linux kernel, the following vulnerability has been resolved: net: sched: sfb: fix null pointer access issue when sfb_init() fails When the default qdisc is sfb, if the qdisc of dev_queue fails to be inited during mqprio_init(), sfb_reset() is invoked t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2022-50403 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2025-38729

    ALSA: usb-audio: Validate UAC3 power domain descriptors, too

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding the unexpected OOB accesses by malicious …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-39757

    ALSA: usb-audio: Validate UAC3 cluster segment descriptors

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declared lengths and whether they fit with the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-39955

    tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

    In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). syzbot reported the splat below where a socket had tcp_sk(sk)->fastopen_rsk in the TCP_ESTABLISHED state. [0] syzbot reused the server…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2393164
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2394615
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395358
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395681
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395891
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396114
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396152
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396494
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396536
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396538
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2402699
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23947.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-50356
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50356
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50356
  • article
    https://lore.kernel.org/linux-cve-announce/2025091714-CVE-2022-50356-fe76@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-50367
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50367
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50367
  • article
    https://lore.kernel.org/linux-cve-announce/2025091716-CVE-2022-50367-651c@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-50403
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50403
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50403
  • article
    https://lore.kernel.org/linux-cve-announce/2025091852-CVE-2022-50403-0471@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-50406
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50406
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50406
  • article
    https://git.kernel.org/stable/c/3d5f3ba1ac28059bdf7000cae2403e4e984308d2
  • article
    https://git.kernel.org/stable/c/7308591d9c7787aec58f6a01a7823f14e90db7a2
  • article
    https://git.kernel.org/stable/c/82c66c46f73b88be74c869e2cbfef45281adf3c6
  • report
    https://access.redhat.com/security/cve/CVE-2022-50410
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50410
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50410
  • article
    https://lore.kernel.org/linux-cve-announce/2025091853-CVE-2022-50410-edee@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-53178
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-53178
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-53178
  • article
    https://lore.kernel.org/linux-cve-announce/2025091555-CVE-2023-53178-9d27@gregkh/T