Red Hat Security Advisory: kernel security update

Fixed packages 142

Vulnerabilities 4

• Critical 9.8
  CVE-2025-40258

  mptcp: fix race condition in mptcp_schedule_work()

  In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race condition in mptcp_schedule_work() syzbot reported use-after-free in mptcp_schedule_work() [1] Issue here is that mptcp_schedule_work() schedules a work, then gets a refcount …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 4, 2025
• High 7.8
  CVE-2025-37789

  net: openvswitch: fix nested key length validation in the set() action

  In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action It's not safe to access nla_len(ovs_key) if the data is smaller than the netlink header. Check that the attribute is OK …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 1, 2025
• High 7.1
  CVE-2023-53034

  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

  In the Linux kernel, the following vulnerability has been resolved: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative. [ 23…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 16, 2025
• Unscored —
  CVE-2025-37819

  irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()

  In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m_get_fwnode() is registered with the pci subsystem as pci_msi_get_fwnode_cb(), which may get invoked a…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 8, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2360239
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2363315
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2365032
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2418876
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1444.json
• report
  https://access.redhat.com/security/cve/CVE-2023-53034
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-53034
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-53034
• article
  https://lore.kernel.org/linux-cve-announce/2025041650-CVE-2023-53034-8c3b@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37789
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37789
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37789
• article
  https://lore.kernel.org/linux-cve-announce/2025050119-CVE-2025-37789-3f0b@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-37819
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37819
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37819
• article
  https://lore.kernel.org/linux-cve-announce/2025050820-CVE-2025-37819-a3b9@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-40258
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40258
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40258
• article
  https://lore.kernel.org/linux-cve-announce/2025120433-CVE-2025-40258-d10d@gregkh/T