Red Hat Security Advisory

RHSA-2025:14009

kernel security update

Released 2025-08-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-55.28.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.28.1.el10_0, kernel-64k-devel-6.12.0-55.28.1.el10_0 +12
Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-55.28.1.el10_0, kernel-64k-6.12.0-55.28.1.el10_0, kernel-64k-core-6.12.0-55.28.1.el10_0 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-55.28.1.el10_0, libperf-6.12.0-55.28.1.el10_0
Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-55.28.1.el10_0, kernel-rt-64k-6.12.0-55.28.1.el10_0, kernel-rt-64k-core-6.12.0-55.28.1.el10_0 +21
Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-55.28.1.el10_0, kernel-rt-core-6.12.0-55.28.1.el10_0, kernel-rt-debug-6.12.0-55.28.1.el10_0 +11

Fixes 4 records

TI-2025-25809 CVE-2025-38471 · GHSA-8r96-vh27-xgf4

tls: always refresh the queue when reading sock

MEDIUM 42

In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock After recent changes in net-next TCP compacts skbs much more aggressively.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00468 Published 2025-07-28 Partial fix · 6.1, 6.1.147 +4 CWE-416

TI-2025-25589 CVE-2025-38250 · GHSA-6r74-5vg7-24jv

Bluetooth: hci_core: Fix use-after-free in vhci_flush()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in vhci_flush() without repro.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00182 Published 2025-07-09 Partial fix · 5.10.259, 5.15.209 +5 CWE-416

TI-2025-15817 CVE-2025-21867 · GHSA-g779-v36v-3w99

bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a use-after-free issue in eth_skb_pkt_type()[1].

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00211 Published 2025-03-27 Fixed in 6.1.130, 6.6.80 +3 CWE-416

TI-2025-25465 CVE-2025-38124 · GHSA-gvvf-v7jc-239r

net: fix udp gso skb_segment after pull from frag_list

LOW 33

In the Linux kernel, the following vulnerability has been resolved: net: fix udp gso skb_segment after pull from frag_list Commit a1e40ac5b5e9 ("net: gso: fix udp gso fraglist segmentation after pull from frag_list") det…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0047 Published 2025-07-03 Fixed in 6.1.142, 6.6.94 +5 CWE-401