RHSA-2025:16539HighCVSS 7.0

Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_79_1, and kpatch-patch-5_14_0-284_92_1 security update

Published
September 24, 2025
Last Modified
October 29, 2026

🔗 CVE IDs covered (5)

CVE-2025-37890 →CVE-2025-38000 →CVE-2025-38001 →CVE-2025-38350 →CVE-2025-38380 · pending

📋 Description

CVE-2025-37890 — kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc CVE-2025-38000 — kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() CVE-2025-38001 — kernel: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice CVE-2025-38350 — kernel: net/sched: Always pass notifications when child class becomes empty CVE-2025-38380 — kernel: i2c/designware: Fix an initialization issue

🎯 Affected products29

  • Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_104_1-0:1-10.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_104_1-0:1-10.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_104_1-0:1-10.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-10.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-10.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_104_1-debugsource-0:1-10.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_104_1-debugsource-0:1-10.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_117_1-0:1-7.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_117_1-0:1-7.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_117_1-0:1-7.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-7.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-7.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_117_1-debugsource-0:1-7.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_117_1-debugsource-0:1-7.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_79_1-0:1-14.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_79_1-0:1-14.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_79_1-0:1-14.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_79_1-debuginfo-0:1-14.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_79_1-debuginfo-0:1-14.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_79_1-debugsource-0:1-14.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_79_1-debugsource-0:1-14.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_92_1-0:1-12.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_92_1-0:1-12.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_92_1-0:1-12.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_92_1-debuginfo-0:1-12.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_92_1-debuginfo-0:1-12.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_92_1-debugsource-0:1-12.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kpatch-patch-5_14_0-284_92_1-debugsource-0:1-12.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this issue, prevent module sch_hfsc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: To mitigate this issue, prevent the sch_cbs module from being loaded. Please see https://access.redhat.com/solutions/41278 for how information on how to blacklist a kernel module to prevent it from loading automatically.

🔗 References (8)