Red Hat Security Advisory: kernel security update

Fixed packages 158

Vulnerabilities 3

• High 7.8
  CVE-2025-38568

  net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing

  In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing TCA_MQPRIO_TC_ENTRY_INDEX is validated using NLA_POLICY_MAX(NLA_U32, TC_QOPT_MAX_QUEUE), which allows the value TC_QOPT_MA…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 19, 2025
• High 7.8
  CVE-2025-40251

  devlink: rate: Unset parent pointer in devl_rate_nodes_destroy

  In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy The function devl_rate_nodes_destroy is documented to "Unset parent for all rate objects". However, it was only calling the driv…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 4, 2025
• Unscored —
  CVE-2025-40154

  ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping

  In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an error message but leaves as is. This m…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Nov 12, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2389507
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2414494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2418892
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1617.json
• report
  https://access.redhat.com/security/cve/CVE-2025-38568
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38568
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38568
• article
  https://lore.kernel.org/linux-cve-announce/2025081909-CVE-2025-38568-7cd9@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-40154
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40154
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40154
• article
  https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40154-fd98@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-40251
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40251
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40251
• article
  https://lore.kernel.org/linux-cve-announce/2025120431-CVE-2025-40251-7db7@gregkh/T