RHSA-2025:19223 — Security Advisory
Red Hat Security Advisory: kernel-rt security update
Severity
ModerateRed Hat Product Security
Products
Official CSAF product identity
Published · October 29, 2025
Updated · November 2, 2026
Topic
An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
-
kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556)
-
kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)
-
kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682)
-
kernel: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CVE-2025-39751)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.