RHSA-2025:11571HighCVSS 7.3

Red Hat Security Advisory: kernel security update

Published
July 23, 2025
Last Modified
October 30, 2026

🔗 CVE IDs covered (5)

CVE-2025-22004 →CVE-2025-22104 →CVE-2025-22121 →CVE-2025-23150 →CVE-2025-37803 →

📋 Description

CVE-2025-22004 — kernel: net: atm: fix use after free in lec_send() CVE-2025-22104 — kernel: ibmvnic: Use kernel helpers for hex dumps CVE-2025-22121 — kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() CVE-2025-23150 — kernel: ext4: fix off-by-one error in do_split CVE-2025-37803 — kernel: udmabuf: fix a buf size overflow issue during udmabuf creation

🎯 Affected products169

  • Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-0:7.0.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-0:7.0.0-284.126.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-0:7.0.0-284.126.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-0:7.0.0-284.126.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.126.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.126.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.126.1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.126.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.126.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.126.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-0:5.14.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-0:5.14.0-284.126.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-0:5.14.0-284.126.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-0:5.14.0-284.126.1.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-0:5.14.0-284.126.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-0:5.14.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-core-0:5.14.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-debug-0:5.14.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-debug-core-0:5.14.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-debug-debuginfo-0:5.14.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • kernel-64k-debug-debuginfo-0:5.14.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-debug-devel-0:5.14.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • kernel-64k-debug-devel-matched-0:5.14.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • kernel-64k-debug-modules-0:5.14.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-debug-modules-core-0:5.14.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-debug-modules-extra-0:5.14.0-284.126.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • +139 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

🔗 References (8)