Red Hat Security Advisory

RHSA-2025:21917

kernel security update

Released 2025-11-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.85.1.el8_10, kernel-4.18.0-553.85.1.el8_10, kernel-abi-stablelists-4.18.0-553.85.1.el8_10 +19
Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.85.1.el8_10

Fixes 3 records

TI-2025-26645 CVE-2025-39973 · GHSA-j9g6-49hr-w92p

i40e: add validation for ring_len param

LOW 39

In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory conte…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00158 Published 2025-10-15 Partial fix · 5.4.300, 5.10.245 +6

TI-2025-26643 CVE-2025-39971 · GHSA-h9cj-j3jc-97wc

i40e: fix idx validation in config queues msg

LOW 37

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_vc_config_que…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00158 Published 2025-10-15 Partial fix · 5.4.300, 5.10.245 +6

TI-2025-26373 CVE-2025-39697 · GHSA-3fr6-pgc4-qmrv

NFS: Fix a race when updating an existing write

LOW 33

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfs_lock_and_join_requests() tests for whether the request is still attached to the mapping, nothi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00159 Published 2025-09-05 Partial fix · 5.10.242, 5.15.191 +5 CWE-362