Red Hat Security Advisory

RHSA-2025:19224

kernel security update

Released 2025-10-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.144.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.144.1.el9_2, kernel-64k-devel-5.14.0-284.144.1.el9_2 +10
Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.144.1.el9_2, kernel-5.14.0-284.144.1.el9_2, kernel-64k-5.14.0-284.144.1.el9_2 +29

Fixes 3 records

TI-2025-26358 CVE-2025-39682 · GHSA-v2pf-75pf-9c5h

tls: fix handling of zero-length records on the rx_list

CRITICAL 100KEV

In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - on…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03198 Published 2025-09-05 Fixed in 6.1.149, 6.6.103 +3 CWE-754

TI-2025-26053 CVE-2025-38718 · GHSA-p9gg-wgfj-48p7

sctp: linearize cloned gso packets in sctp_rcv

LOW 35

In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctp_rcv A cloned head skb still shares these frag skbs in fraglist with the original head skb.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00171 Published 2025-09-04 Partial fix · 5.4.297, 5.10.241 +7 CWE-908

TI-2025-25893 CVE-2025-38556 · GHSA-fr7f-qh29-24jq

HID: core: Harden s32ton() against conversion to 0 bits

LOW 30

In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00171 Published 2025-08-19 Partial fix · 5.10.248, 5.15.198 +6 CWE-125