Red Hat Security Advisory

RHSA-2025:23424

kernel-rt security update

Released 2025-12-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt-5.14.0-70.158.1.rt21.230.el9_0, kernel-rt-core-5.14.0-70.158.1.rt21.230.el9_0, kernel-rt-debug-5.14.0-70.158.1.rt21.230.el9_0 +9
Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt-5.14.0-70.158.1.rt21.230.el9_0, kernel-rt-core-5.14.0-70.158.1.rt21.230.el9_0, kernel-rt-debug-5.14.0-70.158.1.rt21.230.el9_0 +7

Fixes 5 records

TI-2025-26538 CVE-2025-39864 · GHSA-mrpv-wrf5-7wr6

wifi: cfg80211: fix use-after-free in cmp_bss()

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in commit 776b3580178f ("cfg80211: track hidden SSID networks prop…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00235 Published 2025-09-19 Partial fix · 5.4.299, 5.10.243 +6 CWE-416

TI-2023-29612 CVE-2023-53322 · GHSA-422f-2r32-f82h

scsi: qla2xxx: Wait for io return on terminate rport

LOW 39

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Wait for io return on terminate rport System crash due to use after free.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00214 Published 2025-09-16 Partial fix · 4.14.322, 4.19.291 +6 CWE-416

TI-2025-26856 CVE-2025-40186 · GHSA-qx52-pj36-489j

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

LOW 38

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00585 Published 2025-11-12 Partial fix · 5.4.301, 5.10.246 +7

TI-2025-26627 CVE-2025-39955 · GHSA-63w2-9qrq-4h94

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

LOW 35

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2025-10-09 Partial fix · 5.4.300, 5.10.245 +6

TI-2023-29801 CVE-2023-53513 · GHSA-jvcg-848p-wjgf

nbd: fix incomplete validation of ioctl arg

LOW 24

In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbd_ioctl arg without verification.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00149 Published 2025-10-01 Partial fix · 5.15.113, 6.1.30 +2 CWE-674