RHSA-2025:15668 — Security Advisory

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: net/iucv: Avoid explicit cpumask var allocation on stack (CVE-2024-42094)

• kernel: x86: fix user address masking non-canonical speculation issue (CVE-2024-50102)

• kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097)

• kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914)

• kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)

• kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)

• kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250)

• kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332)

• kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352)

• kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.