RHSA-2025:8248 — Security Advisory

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)

• kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)

• kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)

• kernel: tun: limit printing rate when illegal packet received by tun dev (CVE-2024-27013)

• kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)

• kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)

• kernel: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (CVE-2023-52703)

• kernel: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CVE-2023-52840)

• kernel: usbnet: sanity check for maxpacket (CVE-2021-47495)

• kernel: drm/dp_mst: Fix resetting msg rx state after topology removal (CVE-2024-57876)

• kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756)

• kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.