RHSA-2025:16540HighCVSS 7.0

Red Hat Security Advisory: kpatch-patch-5_14_0-427_31_1, kpatch-patch-5_14_0-427_44_1, kpatch-patch-5_14_0-427_55_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update

Published
September 24, 2025
Last Modified
October 29, 2026

🔗 CVE IDs covered (5)

CVE-2025-38000 →CVE-2025-38001 →CVE-2025-38350 →CVE-2025-38380 · pendingCVE-2025-37890 →

📋 Description

CVE-2025-37890 — kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc CVE-2025-38000 — kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() CVE-2025-38001 — kernel: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice CVE-2025-38350 — kernel: net/sched: Always pass notifications when child class becomes empty CVE-2025-38380 — kernel: i2c/designware: Fix an initialization issue

🎯 Affected products36

  • Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_31_1-0:1-14.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_31_1-0:1-14.el9_4.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_31_1-0:1-14.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_31_1-debuginfo-0:1-14.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_31_1-debuginfo-0:1-14.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_31_1-debugsource-0:1-14.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_31_1-debugsource-0:1-14.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_44_1-0:1-12.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_44_1-0:1-12.el9_4.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_44_1-0:1-12.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_44_1-debuginfo-0:1-12.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_44_1-debuginfo-0:1-12.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_44_1-debugsource-0:1-12.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_44_1-debugsource-0:1-12.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_55_1-0:1-10.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_55_1-0:1-10.el9_4.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_55_1-0:1-10.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_55_1-debuginfo-0:1-10.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_55_1-debuginfo-0:1-10.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_55_1-debugsource-0:1-10.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_55_1-debugsource-0:1-10.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_68_2-0:1-7.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_68_2-0:1-7.el9_4.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_68_2-0:1-7.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-7.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-7.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_68_2-debugsource-0:1-7.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_68_2-debugsource-0:1-7.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • kpatch-patch-5_14_0-427_84_1-0:1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • +6 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this issue, prevent module sch_hfsc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: To mitigate this issue, prevent the sch_cbs module from being loaded. Please see https://access.redhat.com/solutions/41278 for how information on how to blacklist a kernel module to prevent it from loading automatically.

🔗 References (8)