Red Hat Security Advisory

RHSA-2025:19105

kernel security update

Released 2025-10-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.58.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.58.1.el9_6, kernel-64k-devel-5.14.0-570.58.1.el9_6 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.58.1.el9_6, kernel-64k-5.14.0-570.58.1.el9_6, kernel-64k-core-5.14.0-570.58.1.el9_6 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.58.1.el9_6, libperf-5.14.0-570.58.1.el9_6
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.58.1.el9_6, kernel-rt-64k-5.14.0-570.58.1.el9_6, kernel-rt-64k-core-5.14.0-570.58.1.el9_6 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.58.1.el9_6, kernel-rt-core-5.14.0-570.58.1.el9_6, kernel-rt-debug-5.14.0-570.58.1.el9_6 +11

Fixes 5 records

TI-2025-26394 CVE-2025-39718 · GHSA-4whh-7h4c-xh74

vsock/virtio: Validate length in packet header before skb_put()

LOW 38

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock packet in the guest, only the virtqueue buffer size is validated…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00167 Published 2025-09-05 Partial fix · 6.1.149, 6.6.103 +3 CWE-787

TI-2025-26406 CVE-2025-39730 · GHSA-frvj-f982-mfmx

NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function needs to check the minimal filehandle length before it can access the embedded fi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00206 Published 2025-09-07 Partial fix · 5.4.297, 5.10.241 +7

TI-2023-29621 CVE-2023-53331 · GHSA-v4w9-9vv8-m7qj

pstore/ram: Check start of empty przs during init

LOW 35

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as valid"), initialization would as…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2025-09-16 Partial fix · 4.14.326, 4.19.295 +11 CWE-787

TI-2025-26493 CVE-2025-39819 · GHSA-96wc-h5c4-3f6j

fs/smb: Fix inconsistent refcnt update

LOW 24

In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in `smb2_compound_op`.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0015 Published 2025-09-16 Partial fix · 6.1.150, 6.6.104 +3

TI-2025-16071 CVE-2025-22122 · GHSA-cjw9-x8qr-5wpf

block: fix adding folio to bio

LOW 24

In the Linux kernel, the following vulnerability has been resolved: block: fix adding folio to bio >4GB folio is possible on some ARCHs, such as aarch64, 16GB hugepage is supported, then 'offset' of folio can't be held i…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00186 Published 2025-04-16 Partial fix · 6.12.33, 6.14.2 +1