Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 5

• High 8.8
  CVE-2025-37849

  KVM: arm64: Tear down vGIC on failed vCPU creation

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 9, 2025
• High 7.8
  CVE-2025-37891

  ALSA: ump: Fix buffer overflow at UMP SysEx message conversion

  In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function from MIDI 1.0 to UMP packet contains an internal buffer to keep the incoming MIDI bytes, and its size is…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2025
• High 7.8
  CVE-2025-40277

  drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

  In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing a…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 6, 2025
• Unscored —
  CVE-2025-21724

  iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()

  In the Linux kernel, the following vulnerability has been resolved: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() Resolve a UBSAN shift-out-of-bounds issue in iova_bitmap_offset_to_index() where shifting the constant "1" (of ty…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 27, 2025
• Unscored —
  CVE-2025-40154

  ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping

  In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an error message but leaves as is. This m…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 12, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2348649
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2365271
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2367202
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2414494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2419954
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0917.json
• report
  https://access.redhat.com/security/cve/CVE-2025-21724
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21724
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21724
• article
  https://lore.kernel.org/linux-cve-announce/2025022647-CVE-2025-21724-f4b1@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37849
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37849
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37849
• article
  https://lore.kernel.org/linux-cve-announce/2025050918-CVE-2025-37849-2a30@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37891
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37891
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37891
• article
  https://lore.kernel.org/linux-cve-announce/2025051909-CVE-2025-37891-5344@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-40154
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40154
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40154
• article
  https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40154-fd98@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-40277
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40277
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40277
• article
  https://lore.kernel.org/linux-cve-announce/2025120717-CVE-2025-40277-d511@gregkh/T