Skip to content
OpenAdvisories
Critical RHSA-2025:9079 8 CVEs

Red Hat Security Advisory: kernel security update

Published Jun 16, 2025 · Updated Jul 30, 2026

Ecosystem: Red Hat

Fixed packages 91

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.0 kernel 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-devel 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-devel-matched 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debug-modules-extra 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-devel 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-devel-matched 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-64k-modules-extra 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-abi-stablelists 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-devel 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-devel-matched 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-modules-extra 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debug-uki-virt 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-aarch64 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-ppc64le 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-s390x 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-debuginfo-common-x86_64 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-devel 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-devel-matched 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-doc 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-modules-extra 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-devel 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debug-modules-extra 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-devel 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-64k-modules-extra 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-devel 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-kvm 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debug-modules-extra 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-devel 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-kvm 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-rt-modules-extra 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-libs 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-tools-libs-devel 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-uki-virt 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-uki-virt-addons 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-devel 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-devel-matched 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules-core 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kernel-zfcpdump-modules-extra 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 libperf 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 libperf-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perf 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perf-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 python3-perf 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 python3-perf-debuginfo 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 rtla 0:6.12.0-55.17.1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 rv 0:6.12.0-55.17.1.el10_0

Vulnerabilities 8

  • Critical 9.8
    CVE-2025-37750

    smb: client: fix UAF in decryption with multichannel

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 ("smb: client: allocate crypto only for primary server") and commit b0abcd65ec54 ("smb: client: fix UAF in async…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2025-21969

    Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd After the hci sync command releases l2cap_conn, the hci receive data work queue references the released l2cap_conn when sendin…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-21764

    ndisc: use RCU protection in ndisc_alloc_skb()

    In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-21887

    ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up

    In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still acces…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-21893

    keys: Fix UAF in key_put()

    In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in key_put() Once a key's reference count has been reduced to 0, the garbage collector thread may destroy it at any time and so key_put() is not allowed to touch the key after t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-21979

    wifi: cfg80211: cancel wiphy_work before freeing wiphy

    In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphy_work before freeing wiphy A wiphy_work can be queued from the moment the wiphy is allocated and initialized (i.e. wiphy_new_nm). When a wiphy_work is queued, the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2025-21962

    cifs: Fix integer overflow while processing closetimeo mount option

    In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper limit, but before it is validated, the va…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2025-21963

    cifs: Fix integer overflow while processing acdirmax mount option

    In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option User-provided mount parameter acdirmax of type u32 is intended to have an upper limit, but before it is validated, the value …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2348575
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2355405
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2356295
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2356624
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2356633
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2356642
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2356652
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2363341
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9079.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-21764
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-21764
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-21764
  • article
    https://lore.kernel.org/linux-cve-announce/2025022605-CVE-2025-21764-1061@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-21887
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-21887
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-21887
  • article
    https://lore.kernel.org/linux-cve-announce/2025032714-CVE-2025-21887-48e8@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-21893
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-21893
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-21893
  • article
    https://lore.kernel.org/linux-cve-announce/2025033126-CVE-2025-21893-f2b4@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-21962
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-21962
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-21962
  • article
    https://lore.kernel.org/linux-cve-announce/2025040145-CVE-2025-21962-9f86@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-21963
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-21963
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-21963
  • article
    https://lore.kernel.org/linux-cve-announce/2025040145-CVE-2025-21963-6e21@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-21969
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-21969
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-21969
  • article
    https://lore.kernel.org/linux-cve-announce/2025040146-CVE-2025-21969-d4f2@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-21979
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-21979
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-21979
  • article
    https://lore.kernel.org/linux-cve-announce/2025040148-CVE-2025-21979-1a5f@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-37750