RHSA-2025:16582HighCVSS 7.0

Red Hat Security Advisory: kpatch-patch-4_18_0-553_16_1, kpatch-patch-4_18_0-553_30_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, and kpatch-patch-4_18_0-553_72_1 security update

Published
September 24, 2025
Last Modified
October 29, 2026

🔗 CVE IDs covered (5)

CVE-2025-37890 →CVE-2025-38000 →CVE-2025-38001 →CVE-2025-38350 →CVE-2025-38380 · pending

📋 Description

CVE-2025-37890 — kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc CVE-2025-38000 — kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() CVE-2025-38001 — kernel: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice CVE-2025-38350 — kernel: net/sched: Always pass notifications when child class becomes empty CVE-2025-38380 — kernel: i2c/designware: Fix an initialization issue

🎯 Affected products36

  • Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_16_1-0:1-10.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_16_1-0:1-10.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_16_1-0:1-10.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_16_1-debuginfo-0:1-10.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_16_1-debuginfo-0:1-10.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_16_1-debugsource-0:1-10.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_16_1-debugsource-0:1-10.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_30_1-0:1-9.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_30_1-0:1-9.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_30_1-0:1-9.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_30_1-debuginfo-0:1-9.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_30_1-debuginfo-0:1-9.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_30_1-debugsource-0:1-9.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_30_1-debugsource-0:1-9.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_40_1-0:1-7.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_40_1-0:1-7.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_40_1-0:1-7.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_40_1-debuginfo-0:1-7.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_40_1-debuginfo-0:1-7.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_40_1-debugsource-0:1-7.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_40_1-debugsource-0:1-7.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_53_1-0:1-5.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_53_1-0:1-5.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_53_1-0:1-5.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-5.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-5.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_53_1-debugsource-0:1-5.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_53_1-debugsource-0:1-5.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kpatch-patch-4_18_0-553_72_1-0:1-2.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • +6 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this issue, prevent module sch_hfsc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: To mitigate this issue, prevent the sch_cbs module from being loaded. Please see https://access.redhat.com/solutions/41278 for how information on how to blacklist a kernel module to prevent it from loading automatically.

🔗 References (8)