Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 5

• High 8.8
  CVE-2025-39971

  i40e: fix idx validation in config queues msg

  In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_vc_config_queues_msg().

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Oct 15, 2025
• High 8.8
  CVE-2025-39973

  i40e: add validation for ring_len param

  In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory context (HMC) without any validation. To add…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Oct 15, 2025
• High 7.5
  CVE-2023-52513

  RDMA/siw: Fix connection failure handling

  In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix connection failure handling In case immediate MPA request processing fails, the newly created endpoint unlinks the listening endpoint and is ready to be dropped. This special ca…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Mar 2, 2024
• Medium 5.5
  CVE-2025-39925

  can: j1939: implement NETDEV_UNREGISTER notification handler

  In the Linux kernel, the following vulnerability has been resolved: can: j1939: implement NETDEV_UNREGISTER notification handler syzbot is reporting unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 problem, for j1939 protocol did not ha…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 1, 2025
• Unscored —
  CVE-2024-35868

  smb: client: fix potential UAF in cifs_stats_proc_write()

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_write() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 19, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2267804
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2281745
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2400629
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2404108
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0173.json
• report
  https://access.redhat.com/security/cve/CVE-2023-52513
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-52513
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-52513
• article
  https://lore.kernel.org/linux-cve-announce/2024030251-CVE-2023-52513-5224@gregkh/T/#u
• report
  https://access.redhat.com/security/cve/CVE-2024-35868
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-35868
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-35868
• article
  https://lore.kernel.org/linux-cve-announce/2024051940-CVE-2024-35868-be7a@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39925
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39925
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39925
• article
  https://lore.kernel.org/linux-cve-announce/2025100124-CVE-2025-39925-bcec@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39971
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39971
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39971
• article
  https://lore.kernel.org/linux-cve-announce/2025101556-CVE-2025-39971-97e2@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39973
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2404116
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39973
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39973
• article
  https://lore.kernel.org/linux-cve-announce/2025101557-CVE-2025-39973-b1a3@gregkh/T