RHSA-2025:17123 — Security Advisory
Red Hat Security Advisory: kernel-rt security update
Severity
ModerateRed Hat Product Security
Products
Official CSAF product identity
Published · October 1, 2025
Updated · October 30, 2026
Topic
An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
-
kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length (CVE-2025-37810)
-
kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200)
-
kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461)
-
kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449)
-
kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472)
-
kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.