Red Hat Security Advisory

RHSA-2025:23425

kernel security update

Released 2025-12-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.173.1.el8_6, kernel-4.18.0-372.173.1.el8_6, kernel-abi-stablelists-4.18.0-372.173.1.el8_6 +14
Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.173.1.el8_6, kernel-4.18.0-372.173.1.el8_6, kernel-abi-stablelists-4.18.0-372.173.1.el8_6 +19
Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.173.1.el8_6, kernel-4.18.0-372.173.1.el8_6, kernel-abi-stablelists-4.18.0-372.173.1.el8_6 +14

Fixes 3 records

TI-2025-26856 CVE-2025-40186 · GHSA-qx52-pj36-489j

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

LOW 38

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00585 Published 2025-11-12 Partial fix · 5.4.301, 5.10.246 +7

TI-2025-26627 CVE-2025-39955 · GHSA-63w2-9qrq-4h94

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

LOW 35

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2025-10-09 Partial fix · 5.4.300, 5.10.245 +6

TI-2025-26499 CVE-2025-39825 · GHSA-3f3q-q5cj-phc5

smb: client: fix race with concurrent opens in rename(2)

LOW 33

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename request to the server, the rename process also involves closing any…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00118 Published 2025-09-16 Partial fix · 6.1.150, 6.6.104 +3 CWE-362