Red Hat Security Advisory

RHSA-2025:22387

kernel-rt security update

Released 2025-12-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.87.1.rt7.428.el8_10, kernel-rt-core-4.18.0-553.87.1.rt7.428.el8_10, kernel-rt-debug-4.18.0-553.87.1.rt7.428.el8_10 +9
Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.87.1.rt7.428.el8_10, kernel-rt-core-4.18.0-553.87.1.rt7.428.el8_10, kernel-rt-debug-4.18.0-553.87.1.rt7.428.el8_10 +7

Fixes 6 records

TI-2025-26059 CVE-2025-38724 · GHSA-x8r2-g34h-2v3j

nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the retu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00406 Published 2025-09-04 Partial fix · 5.4.297, 5.10.241 +7 CWE-416

TI-2025-26856 CVE-2025-40186 · GHSA-qx52-pj36-489j

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

LOW 38

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00585 Published 2025-11-12 Partial fix · 5.4.301, 5.10.246 +7

TI-2025-26627 CVE-2025-39955 · GHSA-63w2-9qrq-4h94

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

LOW 35

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2025-10-09 Partial fix · 5.4.300, 5.10.245 +6

TI-2025-26499 CVE-2025-39825 · GHSA-3f3q-q5cj-phc5

smb: client: fix race with concurrent opens in rename(2)

LOW 33

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename request to the server, the rename process also involves closing any…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00118 Published 2025-09-16 Partial fix · 6.1.150, 6.6.104 +3 CWE-362

TI-2025-26556 CVE-2025-39883 · GHSA-r5ff-446r-jr83

mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory

LOW 30

In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory When I did memory failure tests, below panic occurs: page dumped because:…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00157 Published 2025-09-23 Partial fix · 5.4.300, 5.10.245 +6 CWE-125

TI-2023-29801 CVE-2023-53513 · GHSA-jvcg-848p-wjgf

nbd: fix incomplete validation of ioctl arg

LOW 24

In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbd_ioctl arg without verification.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00149 Published 2025-10-01 Partial fix · 5.15.113, 6.1.30 +2 CWE-674