Red Hat Security Advisory: kernel security update

Fixed packages 160

Vulnerabilities 7

• Critical 9.8
  CVE-2025-37750

  smb: client: fix UAF in decryption with multichannel

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 ("smb: client: allocate crypto only for primary server") and commit b0abcd65ec54 ("smb: client: fix UAF in async…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 1, 2025
• High 8.8
  CVE-2025-21969

  Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd After the hci sync command releases l2cap_conn, the hci receive data work queue references the released l2cap_conn when sendin…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 1, 2025
• High 7.8
  CVE-2025-21979

  wifi: cfg80211: cancel wiphy_work before freeing wiphy

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphy_work before freeing wiphy A wiphy_work can be queued from the moment the wiphy is allocated and initialized (i.e. wiphy_new_nm). When a wiphy_work is queued, the …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 1, 2025
• High 7.8
  CVE-2025-21999

  proc: fix UAF in proc_get_inode()

  In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation. The bug is that pde->proc_ops don't belong to /proc, it belongs to a module, therefore dereferenc…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 3, 2025
• High 7.5
  CVE-2025-21961

  eth: bnxt: fix truesize for mb-xdp-pass case

  In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix truesize for mb-xdp-pass case When mb-xdp is set and return is XDP_PASS, packet is converted from xdp_buff to sk_buff with xdp_update_skb_shared_info() in bnxt_xdp_build_skb().…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 1, 2025
• Medium 5.5
  CVE-2025-21963

  cifs: Fix integer overflow while processing acdirmax mount option

  In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option User-provided mount parameter acdirmax of type u32 is intended to have an upper limit, but before it is validated, the value …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 1, 2025
• Unscored —
  CVE-2025-22126

  md: fix mddev uaf while iterating all_mddevs list

  In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating all_mddevs list While iterating all_mddevs list from md_notify_reboot() and md_exit(), list_for_each_entry_safe is used, and this can race with deletint the …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 16, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2356584
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2356633
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2356642
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2356652
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2357134
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2360236
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2363341
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9080.json
• report
  https://access.redhat.com/security/cve/CVE-2025-21961
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21961
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21961
• article
  https://lore.kernel.org/linux-cve-announce/2025040144-CVE-2025-21961-5759@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-21963
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21963
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21963
• article
  https://lore.kernel.org/linux-cve-announce/2025040145-CVE-2025-21963-6e21@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-21969
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21969
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21969
• article
  https://lore.kernel.org/linux-cve-announce/2025040146-CVE-2025-21969-d4f2@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-21979
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21979
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21979
• article
  https://lore.kernel.org/linux-cve-announce/2025040148-CVE-2025-21979-1a5f@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-21999
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21999
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21999
• article
  https://lore.kernel.org/linux-cve-announce/2025040348-CVE-2025-21999-bc57@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-22126
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-22126
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-22126
• article
  https://lore.kernel.org/linux-cve-announce/2025041629-CVE-2025-22126-50e3@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37750
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37750
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37750
• article
  https://lore.kernel.org/linux-cve-announce/2025050136-CVE-2025-37750-fdd8@gregkh/T