RHSA-2025:22387 — Security Advisory
Red Hat Security Advisory: kernel-rt security update
Severity
ModerateRed Hat Product Security
Products
Official CSAF product identity
Published · December 1, 2025
Updated · October 30, 2026
Topic
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
-
kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
-
kernel: smb: client: fix race with concurrent opens in rename(2) (CVE-2025-39825)
-
kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
-
kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
-
kernel: nbd: fix incomplete validation of ioctl arg (CVE-2023-53513)
-
kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.