Red Hat Security Advisory

RHSA-2025:14497

kpatch-patch-5_14_0-570_17_1 security update

Released 2025-08-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 9) kpatch-patch-5_14_0-570_17_1-1-6.el9_6

Fixes 1 record

TI-2025-25809 CVE-2025-38471 · GHSA-8r96-vh27-xgf4

tls: always refresh the queue when reading sock

MEDIUM 42

In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock After recent changes in net-next TCP compacts skbs much more aggressively.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00468 Published 2025-07-28 Partial fix · 6.1, 6.1.147 +4 CWE-416