Red Hat Security Advisory

RHSA-2025:19409

kernel security update

Released 2025-11-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-570.60.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.60.1.el9_6, kernel-64k-devel-5.14.0-570.60.1.el9_6 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-570.60.1.el9_6, kernel-64k-5.14.0-570.60.1.el9_6, kernel-64k-core-5.14.0-570.60.1.el9_6 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-570.60.1.el9_6, libperf-5.14.0-570.60.1.el9_6
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-570.60.1.el9_6, kernel-rt-64k-5.14.0-570.60.1.el9_6, kernel-rt-64k-core-5.14.0-570.60.1.el9_6 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-570.60.1.el9_6, kernel-rt-core-5.14.0-570.60.1.el9_6, kernel-rt-debug-5.14.0-570.60.1.el9_6 +11

Fixes 3 records

TI-2025-26378 CVE-2025-39702 · GHSA-37gv-w6h3-7hm7

ipv6: sr: Fix MAC comparison to be constant-time

MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00449 Published 2025-09-05 Partial fix · 5.10.249, 5.15.190 +5 CWE-203

TI-2022-25849 CVE-2022-50367 · GHSA-4hcm-79j9-x472

fs: fix UAF/GPF bug in nilfs_mdt_destroy

LOW 35

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfs_mdt_destroy In alloc_inode, inode_init_always() could return -ENOMEM if security_inode_alloc() fails, which causes inode->i…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00225 Published 2025-09-17 Partial fix · 4.9.331, 4.14.296 +7 CWE-416

TI-2023-29783 CVE-2023-53494 · GHSA-3646-gh58-xhcx

crypto: xts - Handle EBUSY correctly

LOW 33

In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00164 Published 2025-10-01 Partial fix · 5.10.173, 5.15.99 +3 CWE-416