Red Hat Security Advisory

RHSA-2025:16669

kernel security update

Released 2025-09-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.91.1.el9_4, libperf-5.14.0-427.91.1.el9_4
Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.91.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.91.1.el9_4, kernel-64k-devel-5.14.0-427.91.1.el9_4 +11
Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.91.1.el9_4, kernel-5.14.0-427.91.1.el9_4, kernel-64k-5.14.0-427.91.1.el9_4 +29
Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.91.1.el9_4, kernel-rt-core-5.14.0-427.91.1.el9_4, kernel-rt-debug-5.14.0-427.91.1.el9_4 +9
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.91.1.el9_4, kernel-rt-core-5.14.0-427.91.1.el9_4, kernel-rt-debug-5.14.0-427.91.1.el9_4 +11

Fixes 5 records

TI-2025-25551 CVE-2025-38211 · GHSA-wcw7-g3wh-rxf7

RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction The commit 59c68ac31e15 ("iw_cm: free cm_id resources on the last deref") simplifi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00415 Published 2025-07-04 Partial fix · 5.4.296, 5.10.240 +6 CWE-416

TI-2024-33565 CVE-2024-50121 · GHSA-wrcm-3w95-9w36

nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net

LOW 36

In the Linux kernel, the following vulnerability has been resolved: nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net In the normal case, when we excute `echo 0 > /proc/fs/nfsd/threads`, the func…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00234 Published 2024-11-05 Partial fix · 5.10.233, 5.15.176 +4 CWE-416

TI-2025-25160 CVE-2025-37810 · GHSA-rpfr-3prf-w7f2

usb: dwc3: gadget: check that event count does not exceed event buffer length

LOW 34

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3_GEVNTCOUNT.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00248 Published 2025-05-08 Partial fix · 5.4.293, 5.10.237 +6 CWE-787

TI-2025-25799 CVE-2025-38461 · GHSA-482q-8xhf-gxrw

vsock: Fix transport_* TOCTOU

LOW 30

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment may race with module unload.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00142 Published 2025-07-25 Partial fix · 5.10.240, 5.15.189 +5 CWE-367

TI-2025-16007 CVE-2025-22058 · GHSA-qh2m-xfgm-crh8

udp: Fix memory accounting leak.

LOW 24

In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0023 Published 2025-04-16 Partial fix · 5.4.301, 5.10.246 +7 CWE-401