Skip to content
OpenAdvisories
Medium RLSA-2025:7956 2 CVEs

Moderate: kernel security update

Published Oct 3, 2025 · Updated Oct 8, 2025

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CVE-2025-21966)

* kernel: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CVE-2025-21993)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 10 kernel 0:6.12.0-55.12.1.el10_0

Vulnerabilities 2

  • High 7.8

    dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature

    In the Linux kernel, the following vulnerability has been resolved: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature Fix memory corruption due to incorrect parameter being passed to bio_init

  • High 7.1

    iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()

    In the Linux kernel, the following vulnerability has been resolved: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() When performing an iSCSI boot using IPv6, iscsistart still reads the /sys/firmware/ibft/ethernetX/subnet-mask entry. …

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2356605
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2356908