RHSA-2025:14136MediumCVSS 7.1

Red Hat Security Advisory: kernel security update

Published
August 20, 2025
Last Modified
November 9, 2026

🔗 CVE IDs covered (6)

CVE-2024-57980 →CVE-2025-21928 →CVE-2025-38086 →CVE-2021-47670 →CVE-2022-49788 →CVE-2022-50020 →

📋 Description

CVE-2021-47670 — kernel: can: peak_usb: fix use after free bugs CVE-2022-49788 — kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() CVE-2022-50020 — kernel: ext4: avoid resizing to a partial cluster size CVE-2024-57980 — kernel: media: uvcvideo: Fix double free in error path CVE-2025-21928 — kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() CVE-2025-38086 — kernel: net: ch9200: fix uninitialised access during mii_nway_restart

🎯 Affected products26

  • Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • bpftool-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • bpftool-debuginfo-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-0:4.18.0-193.164.1.el8_2.src as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-abi-whitelists-0:4.18.0-193.164.1.el8_2.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-core-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-debug-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-debug-core-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-debug-debuginfo-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-debug-devel-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-debug-modules-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-debug-modules-extra-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-debuginfo-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-debuginfo-common-x86_64-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-devel-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-doc-0:4.18.0-193.164.1.el8_2.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-modules-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-modules-extra-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-tools-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-tools-debuginfo-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • kernel-tools-libs-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • perf-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • perf-debuginfo-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • python3-perf-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)
  • python3-perf-debuginfo-0:4.18.0-193.164.1.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this issue, prevent module uvcvideo from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.

🔗 References (9)