Skip to content
OpenAdvisories
High RHSA-2025:9580 7 CVEs

Red Hat Security Advisory: kernel security update

Published Jun 25, 2025 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 43

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos bpftool 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bpftool-debuginfo 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-abi-stablelists 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-core 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-core 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-debuginfo 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-devel 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-modules 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-modules-extra 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-aarch64 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-ppc64le 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-s390x 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-x86_64 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-devel 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-doc 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-modules 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-modules-extra 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-tools 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-tools-debuginfo 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-tools-libs 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-core 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-debuginfo 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-devel 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-modules 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-modules-extra 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos perf 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos perf-debuginfo 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-perf 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-perf-debuginfo 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb bpftool-debuginfo 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debug-debuginfo 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo-common-aarch64 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo-common-ppc64le 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo-common-x86_64 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-tools-debuginfo 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-tools-libs-devel 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb perf-debuginfo 0:4.18.0-553.58.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python3-perf-debuginfo 0:4.18.0-553.58.1.el8_10

Vulnerabilities 7

  • High 8.8
    CVE-2022-48919

    cifs: fix double free race when mount fails in cifs_get_root()

    In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifs_get_root() When cifs_get_root() fails during cifs_smb3_do_mount() we call deactivate_locked_super() which eventually will call delayed_free…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-50301

    security/keys: fix slab-out-of-bounds in key_task_permission

    In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN reports an out of bounds read: BUG: KASAN: slab-out-of-bounds in __kuid_val include/linux/uidgid.h:36 BUG: KASAN: slab-out-o…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-21764

    ndisc: use RCU protection in ndisc_alloc_skb()

    In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2023-53230

    smb: client: fix warning in cifs_smb3_do_mount()

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning in cifs_smb3_do_mount() This fixes the following warning reported by kernel test robot fs/smb/client/cifsfs.c:982 cifs_smb3_do_mount() warn: possible memory leak of '…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-53064

    idpf: fix idpf_vc_core_init error path

    In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpf_vc_core_init error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits fo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-22116

    idpf: check error for register_netdev() on init

    In the Linux kernel, the following vulnerability has been resolved: idpf: check error for register_netdev() on init Current init logic ignores the error code from register_netdev(), which will cause WARN_ON() on attempt to unregister it, if there was one, and…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-38053

    idpf: fix null-ptr-deref in idpf_features_check

    In the Linux kernel, the following vulnerability has been resolved: idpf: fix null-ptr-deref in idpf_features_check idpf_features_check is used to validate the TX packet. skb header length is compared with the hardware supported value received from the device…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2327188
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2327347
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2348575
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9580.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-48919
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2307172
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-48919
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-48919
  • article
    https://lore.kernel.org/linux-cve-announce/2024082218-CVE-2022-48919-9bf1@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-53230
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395266
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-53230
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-53230
  • article
    https://lore.kernel.org/linux-cve-announce/2025091514-CVE-2023-53230-6c94@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-50301
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-50301
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-50301
  • article
    https://lore.kernel.org/linux-cve-announce/2024111907-CVE-2024-50301-ec76@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2024-53064
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-53064
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-53064
  • article
    https://lore.kernel.org/linux-cve-announce/2024111932-CVE-2024-53064-119c@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-21764
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-21764
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-21764
  • article
    https://lore.kernel.org/linux-cve-announce/2025022605-CVE-2025-21764-1061@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-22116
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2360243
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-22116
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-22116
  • article
    https://lore.kernel.org/linux-cve-announce/2025041626-CVE-2025-22116-a2f7@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38053
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2373362
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38053
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38053
  • article
    https://lore.kernel.org/linux-cve-announce/2025061832-CVE-2025-38053-e145@gregkh/T