Red Hat Security Advisory

RHSA-2025:23427

kernel security update

Released 2025-12-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.123.1.el8_8, kernel-4.18.0-477.123.1.el8_8, kernel-abi-stablelists-4.18.0-477.123.1.el8_8 +14
Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.123.1.el8_8, kernel-4.18.0-477.123.1.el8_8, kernel-abi-stablelists-4.18.0-477.123.1.el8_8 +14

Fixes 3 records

TI-2025-26856 CVE-2025-40186 · GHSA-qx52-pj36-489j

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

LOW 38

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00585 Published 2025-11-12 Partial fix · 5.4.301, 5.10.246 +7

TI-2025-26627 CVE-2025-39955 · GHSA-63w2-9qrq-4h94

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

LOW 35

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2025-10-09 Partial fix · 5.4.300, 5.10.245 +6

TI-2023-29691 CVE-2023-53401 · GHSA-67c3-x939-573c

mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()

LOW 21

In the Linux kernel, the following vulnerability has been resolved: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() KCSAN found an issue in obj_stock_flush_required(): stock->cached_objcg can be re…

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00139 Published 2025-09-18 Partial fix · 6.1.45, 6.4.10 +1 CWE-476