Red Hat Security Advisory: kernel security update

Fixed packages 160

Vulnerabilities 5

• Critical 9.8
  CVE-2025-68811

  svcrdma: use rc_pageoff for memcpy byte offset

  In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset svc_rdma_copy_inline_range added rc_curpage (page index) to the page base instead of the byte offset rc_pageoff. Use rc_pageoff so copies land w…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jan 13, 2026
• High 7.8
  CVE-2025-38206

  exfat: fix double free in delayed_free

  In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path. exfat_create_upcase_table() exfat_create_upcase_table() : return error exfat_free_upcase_table() : f…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 4, 2025
• High 7.5
  CVE-2025-40240

  sctp: avoid NULL dereference when chunk data buffer is missing

  In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk->skb pointer is dereferenced in the if-block where it's supposed to be NULL only. chunk->skb can only be NULL if chunk->he…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 4, 2025
• High 7.5
  CVE-2025-71085

  ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()

  In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232 in pskb_expand_head(). This bug is tri…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jan 13, 2026
• Unscored —
  CVE-2024-53229

  RDMA/rxe: Fix the qp flush warnings in req

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the qp flush warnings in req When the qp is in error state, the status of WQEs in the queue should be set to error. Or else the following will appear. [ 920.617269] WARNING: CPU…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 27, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2334357
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2376377
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2418832
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2429026
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2429116
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4745.json
• report
  https://access.redhat.com/security/cve/CVE-2024-53229
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-53229
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-53229
• article
  https://lore.kernel.org/linux-cve-announce/2024122736-CVE-2024-53229-f5cc@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38206
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38206
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38206
• article
  https://lore.kernel.org/linux-cve-announce/2025070420-CVE-2025-38206-a077@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-40240
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40240
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40240
• article
  https://kernelcve.org/list/?q=CVE-2025-40240
• article
  https://lore.kernel.org/linux-cve-announce/2025120403-CVE-2025-40240-745a@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-68811
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-68811
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-68811
• article
  https://lore.kernel.org/linux-cve-announce/2026011311-CVE-2025-68811-7e46@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-71085
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-71085
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-71085
• article
  https://lore.kernel.org/linux-cve-announce/2026011340-CVE-2025-71085-e6c1@gregkh/T