Red Hat Security Advisory: kernel security update

Fixed packages 91

Vulnerabilities 7

• High 7.8
  CVE-2025-37761

  drm/xe: Fix an out-of-bounds shift when invalidating TLB

  In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix an out-of-bounds shift when invalidating TLB When the size of the range invalidated is larger than rounddown_pow_of_two(ULONG_MAX), The function macro roundup_pow_of_two(length) w…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 1, 2025
• High 7.8
  CVE-2025-37789

  net: openvswitch: fix nested key length validation in the set() action

  In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action It's not safe to access nla_len(ovs_key) if the data is smaller than the netlink header. Check that the attribute is OK …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 1, 2025
• High 7.8
  CVE-2025-37891

  ALSA: ump: Fix buffer overflow at UMP SysEx message conversion

  In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function from MIDI 1.0 to UMP packet contains an internal buffer to keep the incoming MIDI bytes, and its size is…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 19, 2025
• High 7.8
  CVE-2025-40277

  drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

  In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing a…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 6, 2025
• Unscored —
  CVE-2025-21815

  mm/compaction: fix UBSAN shift-out-of-bounds warning

  In the Linux kernel, the following vulnerability has been resolved: mm/compaction: fix UBSAN shift-out-of-bounds warning syzkaller reported a UBSAN shift-out-of-bounds warning of (1UL << order) in isolate_freepages_block(). The bogus compound_order can be any…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 27, 2025
• Unscored —
  CVE-2025-37819

  irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()

  In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m_get_fwnode() is registered with the pci subsystem as pci_msi_get_fwnode_cb(), which may get invoked a…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 8, 2025
• Unscored —
  CVE-2025-40154

  ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping

  In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an error message but leaves as is. This m…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 12, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2348902
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2363315
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2363318
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2365032
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2367202
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2414494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2419954
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1236.json
• report
  https://access.redhat.com/security/cve/CVE-2025-21815
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-21815
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-21815
• article
  https://lore.kernel.org/linux-cve-announce/2025022709-CVE-2025-21815-19c9@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37761
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37761
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37761
• article
  https://lore.kernel.org/linux-cve-announce/2025050110-CVE-2025-37761-f71c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37789
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37789
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37789
• article
  https://lore.kernel.org/linux-cve-announce/2025050119-CVE-2025-37789-3f0b@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37819
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37819
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37819
• article
  https://lore.kernel.org/linux-cve-announce/2025050820-CVE-2025-37819-a3b9@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37891
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37891
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37891
• article
  https://lore.kernel.org/linux-cve-announce/2025051909-CVE-2025-37891-5344@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-40154
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40154
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40154
• article
  https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40154-fd98@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-40277
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40277
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40277
• article
  https://lore.kernel.org/linux-cve-announce/2025120717-CVE-2025-40277-d511@gregkh/T