Red Hat Security Advisory: kernel security update

Fixed packages 160

Vulnerabilities 6

• Critical 9.8
  CVE-2025-68285

  libceph: fix potential use-after-free in have_mon_and_osd_map()

  In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_and_osd_map() The wait loop in __ceph_open_session() can race with the client receiving a new monmap or osdmap shortly after the initial map …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 16, 2025
• High 8.8
  CVE-2025-37849

  KVM: arm64: Tear down vGIC on failed vCPU creation

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 9, 2025
• High 7.8
  CVE-2025-37891

  ALSA: ump: Fix buffer overflow at UMP SysEx message conversion

  In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function from MIDI 1.0 to UMP packet contains an internal buffer to keep the incoming MIDI bytes, and its size is…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2025
• High 7.8
  CVE-2025-39697

  NFS: Fix a race when updating an existing write

  In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfs_lock_and_join_requests() tests for whether the request is still attached to the mapping, nothing prevents a call to nfs_inode_remove_…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Sep 5, 2025
• High 7.5
  CVE-2025-21795

  NFSD: fix hang in nfsd4_shutdown_callback

  In the Linux kernel, the following vulnerability has been resolved: NFSD: fix hang in nfsd4_shutdown_callback If nfs4_client is in courtesy state then there is no point to send the callback. This causes nfsd4_shutdown_callback to hang since cl_cb_inflight is …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 27, 2025
• Unscored —
  CVE-2025-40154

  ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping

  In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an error message but leaves as is. This m…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 12, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2348523
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2365271
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2367202
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393481
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2414494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2422801
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0804.json
• report
  https://access.redhat.com/security/cve/CVE-2025-21795
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21795
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21795
• article
  https://lore.kernel.org/linux-cve-announce/2025022610-CVE-2025-21795-785d@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37849
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37849
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37849
• article
  https://lore.kernel.org/linux-cve-announce/2025050918-CVE-2025-37849-2a30@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37891
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37891
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37891
• article
  https://lore.kernel.org/linux-cve-announce/2025051909-CVE-2025-37891-5344@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-39697
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-39697
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-39697
• article
  https://lore.kernel.org/linux-cve-announce/2025090548-CVE-2025-39697-5284@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-40154
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40154
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40154
• article
  https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40154-fd98@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-68285
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-68285
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-68285
• article
  https://lore.kernel.org/linux-cve-announce/2025121638-CVE-2025-68285-8339@gregkh/T