Red Hat Security Advisory

RHSA-2025:22571

kernel security update

Released 2025-12-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.47.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.47.1.el10_0, kernel-64k-devel-6.12.0-55.47.1.el10_0 +12
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.47.1.el10_0, kernel-64k-6.12.0-55.47.1.el10_0, kernel-64k-core-6.12.0-55.47.1.el10_0 +28
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.47.1.el10_0, libperf-6.12.0-55.47.1.el10_0
Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.47.1.el10_0, kernel-rt-64k-6.12.0-55.47.1.el10_0, kernel-rt-64k-core-6.12.0-55.47.1.el10_0 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.47.1.el10_0, kernel-rt-core-6.12.0-55.47.1.el10_0, kernel-rt-debug-6.12.0-55.47.1.el10_0 +11

Fixes 5 records

TI-2025-26059 CVE-2025-38724 · GHSA-x8r2-g34h-2v3j

nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the retu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00406 Published 2025-09-04 Partial fix · 5.4.297, 5.10.241 +7 CWE-416

TI-2025-26645 CVE-2025-39973 · GHSA-j9g6-49hr-w92p

i40e: add validation for ring_len param

LOW 39

In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory conte…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00158 Published 2025-10-15 Partial fix · 5.4.300, 5.10.245 +6

TI-2025-26643 CVE-2025-39971 · GHSA-h9cj-j3jc-97wc

i40e: fix idx validation in config queues msg

LOW 37

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_vc_config_que…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00158 Published 2025-10-15 Partial fix · 5.4.300, 5.10.245 +6

TI-2025-26590 CVE-2025-39918 · GHSA-64qw-p444-mx2m

wifi: mt76: fix linked list corruption

LOW 37

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00207 Published 2025-10-01 Partial fix · 6.12.46, 6.16.6 +1

TI-2025-26627 CVE-2025-39955 · GHSA-63w2-9qrq-4h94

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

LOW 35

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2025-10-09 Partial fix · 5.4.300, 5.10.245 +6