Red Hat Security Advisory

RHSA-2025:21933

kernel security update

Released 2025-11-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.66.1.el9_6, libperf-5.14.0-570.66.1.el9_6
Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.66.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.66.1.el9_6, kernel-64k-devel-5.14.0-570.66.1.el9_6 +12
Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.66.1.el9_6, kernel-64k-5.14.0-570.66.1.el9_6, kernel-64k-core-5.14.0-570.66.1.el9_6 +28
Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.66.1.el9_6, kernel-rt-64k-5.14.0-570.66.1.el9_6, kernel-rt-64k-core-5.14.0-570.66.1.el9_6 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.66.1.el9_6, kernel-rt-core-5.14.0-570.66.1.el9_6, kernel-rt-debug-5.14.0-570.66.1.el9_6 +11

Fixes 3 records

TI-2025-26645 CVE-2025-39973 · GHSA-j9g6-49hr-w92p

i40e: add validation for ring_len param

LOW 39

In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory conte…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00158 Published 2025-10-15 Partial fix · 5.4.300, 5.10.245 +6

TI-2025-26643 CVE-2025-39971 · GHSA-h9cj-j3jc-97wc

i40e: fix idx validation in config queues msg

LOW 37

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_vc_config_que…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00158 Published 2025-10-15 Partial fix · 5.4.300, 5.10.245 +6

TI-2025-26719 CVE-2025-40047 · GHSA-2r8v-pxwr-9h89

io_uring/waitid: always prune wait queue entry in io_waitid_wait()

LOW 33

In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry in io_waitid_wait() For a successful return, always remove our entry from the wait queue entry list.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00163 Published 2025-10-28 Partial fix · 6.12.53, 6.17.3 +1