Red Hat Security Advisory

RHSA-2025:23241

kernel security update

Released 2025-12-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-611.16.1.el9_7, kernel-64k-debug-devel-matched-5.14.0-611.16.1.el9_7, kernel-64k-devel-5.14.0-611.16.1.el9_7 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-611.16.1.el9_7, kernel-64k-5.14.0-611.16.1.el9_7, kernel-64k-core-5.14.0-611.16.1.el9_7 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-611.16.1.el9_7, libperf-5.14.0-611.16.1.el9_7
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-611.16.1.el9_7, kernel-rt-64k-5.14.0-611.16.1.el9_7, kernel-rt-64k-core-5.14.0-611.16.1.el9_7 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-611.16.1.el9_7, kernel-rt-core-5.14.0-611.16.1.el9_7, kernel-rt-debug-5.14.0-611.16.1.el9_7 +9

Fixes 3 records

TI-2025-26846 CVE-2025-40176 · GHSA-79rw-jwgh-qv55

tls: wait for pending async decryptions if tls_strp_msg_hold fails

MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tls_strp_msg_hold fails Async decryption calls tls_strp_msg_hold to create a clone of the input skb to hold r…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00487 Published 2025-11-12 Fixed in 6.1.158, 6.6.114 +3

TI-2025-25837 CVE-2025-38499 · GHSA-cc85-5h45-qhc8

clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns

LOW 35

In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns What we want is to verify there is that clone won't expose something hi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00185 Published 2025-08-11 Fixed in 4.5, 4.10 +11

TI-2025-26638 CVE-2025-39966 · GHSA-jrgc-8xmv-4r2m

iommufd: Fix race during abort for file descriptors

LOW 33

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix race during abort for file descriptors fput() doesn't actually call file_operations release() synchronously, it puts the file on a work que…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00114 Published 2025-10-15 Partial fix · 6.12.50, 6.16.10 +1 CWE-362