Red Hat Security Advisory

RHSA-2025:23250

kernel security update

Released 2025-12-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.50.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.50.1.el10_0, kernel-64k-devel-6.12.0-55.50.1.el10_0 +12
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.50.1.el10_0, kernel-64k-6.12.0-55.50.1.el10_0, kernel-64k-core-6.12.0-55.50.1.el10_0 +28
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.50.1.el10_0, libperf-6.12.0-55.50.1.el10_0
Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.50.1.el10_0, kernel-rt-64k-6.12.0-55.50.1.el10_0, kernel-rt-64k-core-6.12.0-55.50.1.el10_0 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.50.1.el10_0, kernel-rt-core-6.12.0-55.50.1.el10_0, kernel-rt-debug-6.12.0-55.50.1.el10_0 +11

Fixes 3 records

TI-2025-25837 CVE-2025-38499 · GHSA-cc85-5h45-qhc8

clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns

LOW 35

In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns What we want is to verify there is that clone won't expose something hi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00185 Published 2025-08-11 Fixed in 4.5, 4.10 +11

TI-2025-26638 CVE-2025-39966 · GHSA-jrgc-8xmv-4r2m

iommufd: Fix race during abort for file descriptors

LOW 33

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix race during abort for file descriptors fput() doesn't actually call file_operations release() synchronously, it puts the file on a work que…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00114 Published 2025-10-15 Partial fix · 6.12.50, 6.16.10 +1 CWE-362

TI-2025-26656 CVE-2025-39984 · GHSA-3cpf-qphm-hqhv

net: tun: Update napi->skb after XDP process

LOW 22

In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi->skb after XDP process The syzbot report a UAF issue: BUG: KASAN: slab-use-after-free in skb_reset_mac_header include/linux/skbuff…

CVSS — EPSS 0.00197 Published 2025-10-15 Fixed in 6.12.50, 6.16.10 +1