Skip to content
OpenAdvisories
High RHSA-2026:18587 15 CVEs

Red Hat Security Advisory: kernel security update

Published May 20, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 158

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-64k-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-64k-debug-devel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-64k-debug-devel-matched 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-64k-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-64k-devel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-64k-devel-matched 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debug-devel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debug-devel-matched 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo-common-aarch64 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo-common-ppc64le 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo-common-s390x 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo-common-x86_64 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-devel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-devel-matched 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-doc 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-rt-64k-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-rt-64k-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-rt-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-rt-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-tools-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-zfcpdump-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-zfcpdump-devel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-zfcpdump-devel-matched 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream libperf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perf 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-perf 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-perf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream rtla 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream rv 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debug 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debug-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debug-modules 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debug-modules-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debug-modules-extra 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-modules 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-modules-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-modules-extra 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-abi-stablelists 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-modules 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-modules-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-modules-extra 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-uki-virt 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo-common-aarch64 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo-common-ppc64le 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo-common-s390x 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo-common-x86_64 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-modules 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-modules-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-modules-extra 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-rt-64k-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-rt-64k-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-rt-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-rt-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-tools 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-tools-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-tools-libs 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-uki-virt 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-uki-virt-addons 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-modules 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-modules-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-modules-extra 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos libperf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos perf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos python3-perf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-64k-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-64k-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo-common-aarch64 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo-common-ppc64le 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo-common-s390x 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo-common-x86_64 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-rt-64k-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-rt-64k-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-rt-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-rt-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-tools-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-tools-libs-devel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-zfcpdump-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb libperf 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb libperf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb perf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb python3-perf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-debuginfo-common-x86_64 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug-devel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug-modules 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug-modules-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug-modules-extra 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-devel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-modules 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-modules-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-modules-extra 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-tools-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv libperf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv perf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv python3-perf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-64k-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-64k-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-debuginfo-common-aarch64 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-debuginfo-common-x86_64 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug-devel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug-modules 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug-modules-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug-modules-extra 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-devel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-modules 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-modules-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-modules-extra 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug-devel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug-modules 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug-modules-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug-modules-extra 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-devel 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-modules 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-modules-core 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-modules-extra 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-tools-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime libperf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime perf-debuginfo 0:5.14.0-687.5.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime python3-perf-debuginfo 0:5.14.0-687.5.1.el9_8

Vulnerabilities 15

  • High 8.9
    CVE-2025-30156

    Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery

    Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initia…

    ceph ceph ceph ceph Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38097

    espintcp: remove encap socket caching to avoid reference leak

    In the Linux kernel, the following vulnerability has been resolved: espintcp: remove encap socket caching to avoid reference leak The current scheme for caching the encap socket can lead to reference leaks when we try to delete the netns. The reference chain …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38166

    bpf: fix ktls panic with sockmap

    In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] ------------[ cut here ]------------ [ 2172.936999] kernel BUG at lib/iov_iter.c:629! ...... [ 2172.944996] PKRU: 55555554 [ 2172.945155] Call …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38470

    net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime

    In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime Assuming the "rx-vlan-filter" feature is enabled on a net device, the 8021q module will automatically add or remo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-39866 Public exploit

    fs: writeback: fix use-after-free in __mark_inode_dirty()

    In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurred when __mark_inode_dirty() get the bdi_writeback that was in the progress of switching. CPU: 1 PID: 5…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23243

    RDMA/umad: Reject negative data_len in ib_umad_write

    In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP heade…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2025-38405

    nvmet: fix memory leak of bio integrity

    In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet receives commands with metadata there is a continuous memory leak of kmalloc-128 slab or more precisely bio->bi_integrity. Since commit bf4c89…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-22105

    bonding: check xdp prog when set bond mode

    In the Linux kernel, the following vulnerability has been resolved: bonding: check xdp prog when set bond mode Following operations can trigger a warning[1]: ip netns add ns1 ip netns exec ns1 ip link add bond0 type bond mode balance-rr ip netns exec ns1 ip l…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-37980

    block: fix resource leak in blk_register_queue() error path

    In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When registering a queue fails after blk_mq_sysfs_register() is successful but the function later encounters an error, we need to c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-38015

    dmaengine: idxd: fix memory leak in error handling path of idxd_alloc

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc Memory allocated for idxd is not freed if an error occurs during idxd_alloc(). To fix it, free the allocated memory in th…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-38279

    bpf: Do not include stack ptr register in precision backtracking bookkeeping

    In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi Lai reported an issue ([1]) where the following warning appears in kernel dmesg: [ 60.643604] verifier backtrac…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-38400

    nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.

    In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. syzbot reported a warning below [1] following a fault injection in nfs_fs_proc_net_init(). [0] When nfs_fs_proc_net_init() f…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-38441

    netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() syzbot found a potential access to uninit-value in nf_flow_pppoe_proto() Blamed commit forgot the Ethernet header. B…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-40134

    dm: fix NULL pointer dereference in __dm_suspend()

    In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend() There is a race condition between dm device suspend and table load that can lead to null pointer dereference. The issue occurs when suspend …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-23040

    wifi: mac80211_hwsim: fix typo in frequency notification

    In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: fix typo in frequency notification The NAN notification is for 5745 MHz which corresponds to channel 149 and not 5475 which is not actually a valid channel. This could r…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index
  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2360247
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2367614
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2373343
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376060
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376065
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2379178
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2383397
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2383399
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2383478
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2383906
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2396940
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2414468
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2436806
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2448594
  • article
    https://issues.redhat.com/browse/RHEL-101326
  • article
    https://issues.redhat.com/browse/RHEL-101342
  • article
    https://issues.redhat.com/browse/RHEL-107273
  • article
    https://issues.redhat.com/browse/RHEL-107917
  • article
    https://issues.redhat.com/browse/RHEL-109634
  • article
    https://issues.redhat.com/browse/RHEL-111113
  • article
    https://issues.redhat.com/browse/RHEL-116075
  • article
    https://issues.redhat.com/browse/RHEL-125143
  • article
    https://issues.redhat.com/browse/RHEL-141481
  • article
    https://issues.redhat.com/browse/RHEL-145938
  • article
    https://issues.redhat.com/browse/RHEL-147489
  • article
    https://issues.redhat.com/browse/RHEL-9065
  • article
    https://issues.redhat.com/browse/RHEL-95934
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18587.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-22105
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-22105
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-22105
  • article
    https://lore.kernel.org/linux-cve-announce/2025041622-CVE-2025-22105-afef@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-30156
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2393864
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-30156
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-30156
  • report
    https://access.redhat.com/security/cve/CVE-2025-37980