Red Hat Security Advisory: kernel security update

Fixed packages 91

Vulnerabilities 6

• High 8.8
  CVE-2025-37849

  KVM: arm64: Tear down vGIC on failed vCPU creation

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 9, 2025
• High 7.8
  CVE-2025-38141

  dm: fix dm_blk_report_zones

  In the Linux kernel, the following vulnerability has been resolved: dm: fix dm_blk_report_zones If dm_get_live_table() returned NULL, dm_put_live_table() was never called. Also, it is possible that md->zone_revalidate_map will change while calling this functi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 3, 2025
• High 7.8
  CVE-2025-38248 Public exploit

  bridge: mcast: Fix use-after-free during router port configuration

  In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a global list of ports behind which a multicast router resides. The list is consulted during forwarding…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 9, 2025
• High 7.8
  CVE-2025-40096

  drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

  In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies When adding dependencies with drm_sched_job_add_dependency(), that function consumes the fence reference both on su…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Oct 30, 2025
• High 7.5
  CVE-2025-68349

  NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid

  In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4_write_inode -> pnfs_layoutcommit_inode…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 24, 2025
• High 7.5
  CVE-2025-71085

  ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()

  In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232 in pskb_expand_head(). This bug is tri…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jan 13, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2365271
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2376052
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2378981
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2407333
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2424880
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2429026
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6193.json
• report
  https://access.redhat.com/security/cve/CVE-2025-37849
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-37849
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-37849
• article
  https://lore.kernel.org/linux-cve-announce/2025050918-CVE-2025-37849-2a30@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38141
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38141
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38141
• article
  https://lore.kernel.org/linux-cve-announce/2025070333-CVE-2025-38141-560e@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-38248
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38248
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38248
• article
  https://lore.kernel.org/linux-cve-announce/2025070934-CVE-2025-38248-003c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-40096
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40096
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40096
• article
  https://lore.kernel.org/linux-cve-announce/2025103016-CVE-2025-40096-09cc@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-68349
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-68349
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-68349
• article
  https://lore.kernel.org/linux-cve-announce/2025122453-CVE-2025-68349-12d5@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-71085
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-71085
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-71085
• article
  https://lore.kernel.org/linux-cve-announce/2026011340-CVE-2025-71085-e6c1@gregkh/T