RHSA-2025:17123MediumCVSS 7.3

Red Hat Security Advisory: kernel-rt security update

Published
October 1, 2025
Last Modified
November 9, 2026

🔗 CVE IDs covered (6)

CVE-2025-38449 →CVE-2025-38461 →CVE-2025-38472 →CVE-2025-38527 →CVE-2025-37810 →CVE-2025-38200 →

📋 Description

CVE-2025-37810 — kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length CVE-2025-38200 — kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw CVE-2025-38449 — kernel: drm/gem: Acquire references on GEM handles for framebuffers CVE-2025-38461 — kernel: vsock: Fix transport_* TOCTOU CVE-2025-38472 — kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry CVE-2025-38527 — kernel: smb: client: fix use-after-free in cifs_oplock_break

🎯 Affected products36

  • Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-0:5.14.0-284.140.1.rt14.425.el9_2.src as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-0:5.14.0-284.140.1.rt14.425.el9_2.src as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-core-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-core-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-core-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-core-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-debuginfo-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-debuginfo-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-devel-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-devel-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-kvm-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-modules-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-modules-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-modules-core-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-modules-core-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-modules-extra-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-modules-extra-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debuginfo-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debuginfo-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debuginfo-common-x86_64-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debuginfo-common-x86_64-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-devel-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-devel-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-kvm-0:5.14.0-284.140.1.rt14.425.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • +6 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this issue, prevent module drm from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: To mitigate this issue, prevent module vsock from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: In order to trigger the issue, it requires the ability to create user/net namespaces. On non-containerized deployments of Red Hat Enterprise Linux 8, you can disable user namespaces by setting user.max_user_namespaces to 0: # echo "user.max_user_namespaces=0" > /etc/sysctl.d/userns.conf # sysctl -p /etc/sysctl.d/userns.conf On containerized deployments, such as Red Hat OpenShift Container Platform, do not use this mitigation as the functionality is needed to be enabled. If nf_conntrack not being used with netfilter, then disabled it. To mitigate this issue, prevent module nf_conntrack from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Also check the solution about Kernel panic in __nf_ct_delete_from_lists for workaround at https://access.redhat.com/solutions/7130481 with broader details.

🔗 References (9)