RHSA-2025:14746HighCVSS 7.1

Red Hat Security Advisory: kernel-rt security update

Published
August 27, 2025
Last Modified
October 29, 2026

🔗 CVE IDs covered (9)

CVE-2022-49788 →CVE-2022-50020 →CVE-2022-50022 →CVE-2024-57980 →CVE-2025-21928 →CVE-2025-23150 →CVE-2025-38000 →CVE-2025-38177 →CVE-2025-38350 →

📋 Description

CVE-2022-49788 — kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() CVE-2022-50020 — kernel: ext4: avoid resizing to a partial cluster size CVE-2022-50022 — kernel: drivers:md:fix a potential use-after-free bug CVE-2024-57980 — kernel: media: uvcvideo: Fix double free in error path CVE-2025-21928 — kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() CVE-2025-23150 — kernel: ext4: fix off-by-one error in do_split CVE-2025-38000 — kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() CVE-2025-38177 — kernel: sch_hfsc: make hfsc_qlen_notify() idempotent CVE-2025-38350 — kernel: net/sched: Always pass notifications when child class becomes empty

🎯 Affected products13

  • Red Hat Enterprise Linux for Real Time (v. 7 ELS)
  • kernel-rt-0:3.10.0-1160.137.1.rt56.1289.el7.src as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
  • kernel-rt-0:3.10.0-1160.137.1.rt56.1289.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
  • kernel-rt-debug-0:3.10.0-1160.137.1.rt56.1289.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
  • kernel-rt-debug-debuginfo-0:3.10.0-1160.137.1.rt56.1289.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
  • kernel-rt-debug-devel-0:3.10.0-1160.137.1.rt56.1289.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
  • kernel-rt-debuginfo-0:3.10.0-1160.137.1.rt56.1289.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
  • kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.137.1.rt56.1289.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
  • kernel-rt-devel-0:3.10.0-1160.137.1.rt56.1289.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
  • kernel-rt-doc-0:3.10.0-1160.137.1.rt56.1289.el7.noarch as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
  • kernel-rt-trace-0:3.10.0-1160.137.1.rt56.1289.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
  • kernel-rt-trace-debuginfo-0:3.10.0-1160.137.1.rt56.1289.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
  • kernel-rt-trace-devel-0:3.10.0-1160.137.1.rt56.1289.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this issue, prevent module uvcvideo from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: To mitigate this issue, prevent module sch_hfsc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: To mitigate this issue, prevent the sch_cbs module from being loaded. Please see https://access.redhat.com/solutions/41278 for how information on how to blacklist a kernel module to prevent it from loading automatically.

🔗 References (12)