Red Hat Security Advisory

RHSA-2025:23423

kernel security update

Released 2025-12-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.150.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.150.1.el9_2, kernel-64k-devel-5.14.0-284.150.1.el9_2 +10
Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.150.1.el9_2, kernel-5.14.0-284.150.1.el9_2, kernel-64k-5.14.0-284.150.1.el9_2 +29

Fixes 4 records

TI-2025-26538 CVE-2025-39864 · GHSA-mrpv-wrf5-7wr6

wifi: cfg80211: fix use-after-free in cmp_bss()

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in commit 776b3580178f ("cfg80211: track hidden SSID networks prop…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00235 Published 2025-09-19 Partial fix · 5.4.299, 5.10.243 +6 CWE-416

TI-2023-29612 CVE-2023-53322 · GHSA-422f-2r32-f82h

scsi: qla2xxx: Wait for io return on terminate rport

LOW 39

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Wait for io return on terminate rport System crash due to use after free.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00214 Published 2025-09-16 Partial fix · 4.14.322, 4.19.291 +6 CWE-416

TI-2025-26856 CVE-2025-40186 · GHSA-qx52-pj36-489j

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

LOW 38

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00585 Published 2025-11-12 Partial fix · 5.4.301, 5.10.246 +7

TI-2025-26627 CVE-2025-39955 · GHSA-63w2-9qrq-4h94

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

LOW 35

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2025-10-09 Partial fix · 5.4.300, 5.10.245 +6