Red Hat Security Advisory

RHSA-2025:17760

kernel security update

Released 2025-10-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.52.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.52.1.el9_6, kernel-64k-devel-5.14.0-570.52.1.el9_6 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.52.1.el9_6, kernel-64k-5.14.0-570.52.1.el9_6, kernel-64k-core-5.14.0-570.52.1.el9_6 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.52.1.el9_6, libperf-5.14.0-570.52.1.el9_6
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.52.1.el9_6, kernel-rt-64k-5.14.0-570.52.1.el9_6, kernel-rt-64k-core-5.14.0-570.52.1.el9_6 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.52.1.el9_6, kernel-rt-core-5.14.0-570.52.1.el9_6, kernel-rt-debug-5.14.0-570.52.1.el9_6 +11

Fixes 4 records

TI-2025-25949 CVE-2025-38614 · GHSA-grcg-mgx8-mfvf

eventpoll: Fix semi-unbounded recursion

LOW 35

In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EP_MAX_NESTS+1 links.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00185 Published 2025-08-19 Partial fix · 2.6.33, 2.6.34 +10 CWE-674

TI-2023-29663 CVE-2023-53373 · GHSA-gxr7-4mfg-37c7

crypto: seqiv - Handle EBUSY correctly

LOW 35

In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2025-09-18 Partial fix · 4.14.308, 4.19.276 +6 CWE-416

TI-2025-26432 CVE-2025-39757 · GHSA-jrpg-g4vf-p4hw

ALSA: usb-audio: Validate UAC3 cluster segment descriptors

LOW 30

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declare…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00179 Published 2025-09-11 Partial fix · 5.4.297, 5.10.241 +7 CWE-125

TI-2025-25893 CVE-2025-38556 · GHSA-fr7f-qh29-24jq

HID: core: Harden s32ton() against conversion to 0 bits

LOW 30

In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00171 Published 2025-08-19 Partial fix · 5.10.248, 5.15.198 +6 CWE-125