chore(deps): update rpm updates to v5.14.0-570.44.1.el9_6 [security] (rhoai-2.24)

[konflux-internal-p02]

This PR contains the following updates:

Package	Update	Change
kernel-headers	patch	5.14.0-570.42.2.el9_6 -> 5.14.0-570.44.1.el9_6

---

kernel: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()

CVE-2025-21993

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-21993
• https://bugzilla.redhat.com/show_bug.cgi?id=2356908
• https://www.cve.org/CVERecord?id=CVE-2025-21993
• https://nvd.nist.gov/vuln/detail/CVE-2025-21993
• https://lore.kernel.org/linux-cve-announce/2025040257-CVE-2025-21993-54d1@​gregkh/T

---

kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature

CVE-2025-21966

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-21966
• https://bugzilla.redhat.com/show_bug.cgi?id=2356605
• https://www.cve.org/CVERecord?id=CVE-2025-21966
• https://nvd.nist.gov/vuln/detail/CVE-2025-21966
• https://lore.kernel.org/linux-cve-announce/2025040145-CVE-2025-21966-afc6@​gregkh/T

---

kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

CVE-2024-53104

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2024-53104
• https://bugzilla.redhat.com/show_bug.cgi?id=2329817
• https://www.cve.org/CVERecord?id=CVE-2024-53104
• https://nvd.nist.gov/vuln/detail/CVE-2024-53104
• https://access.redhat.com/articles/7107058
• https://lore.kernel.org/linux-cve-announce/2024120232-CVE-2024-53104-d781@​gregkh/T
• https://securitylab.amnesty.org/latest/2025/02/cellebrite-zero-day-exploit-used-to-target-phone-of-serbian-student-activist/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

---

kernel: vsock: Keep the binding until socket destruction

CVE-2025-21756

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21756
• https://bugzilla.redhat.com/show_bug.cgi?id=2348609
• https://www.cve.org/CVERecord?id=CVE-2025-21756
• https://nvd.nist.gov/vuln/detail/CVE-2025-21756
• https://lore.kernel.org/linux-cve-announce/2025022603-CVE-2025-21756-5e09@​gregkh/T

---

kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list

CVE-2025-21919

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-21919
• https://bugzilla.redhat.com/show_bug.cgi?id=2356618
• https://www.cve.org/CVERecord?id=CVE-2025-21919
• https://nvd.nist.gov/vuln/detail/CVE-2025-21919
• https://lore.kernel.org/linux-cve-announce/2025040131-CVE-2025-21919-5f2a@gregkh/T

---

kernel: cifs: Fix integer overflow while processing acregmax mount option

CVE-2025-21964

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-21964
• https://bugzilla.redhat.com/show_bug.cgi?id=2356665
• https://www.cve.org/CVERecord?id=CVE-2025-21964
• https://nvd.nist.gov/vuln/detail/CVE-2025-21964
• https://lore.kernel.org/linux-cve-announce/2025040145-CVE-2025-21964-e2c1@​gregkh/T

---

kernel: ext4: fix OOB read when checking dotdot dir

CVE-2025-37785

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-37785
• https://bugzilla.redhat.com/show_bug.cgi?id=2360921
• https://www.cve.org/CVERecord?id=CVE-2025-37785
• https://nvd.nist.gov/vuln/detail/CVE-2025-37785
• https://lore.kernel.org/linux-cve-announce/2025041813-CVE-2025-37785-e13d@gregkh/T

---

kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi

CVE-2025-37943

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-37943
• https://bugzilla.redhat.com/show_bug.cgi?id=2367748
• https://www.cve.org/CVERecord?id=CVE-2025-37943
• https://nvd.nist.gov/vuln/detail/CVE-2025-37943
• https://lore.kernel.org/linux-cve-announce/2025052043-CVE-2025-37943-9cf8@​gregkh/T

---

kernel: net: gso: fix ownership in __udp_gso_segment

CVE-2025-21926

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21926
• https://bugzilla.redhat.com/show_bug.cgi?id=2356587
• https://www.cve.org/CVERecord?id=CVE-2025-21926
• https://nvd.nist.gov/vuln/detail/CVE-2025-21926
• https://lore.kernel.org/linux-cve-announce/2025040132-CVE-2025-21926-fd40@​gregkh/T

---

kernel: net: fix geneve_opt length integer overflow

CVE-2025-22055

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-22055
• https://bugzilla.redhat.com/show_bug.cgi?id=2360300
• https://www.cve.org/CVERecord?id=CVE-2025-22055
• https://nvd.nist.gov/vuln/detail/CVE-2025-22055
• https://lore.kernel.org/linux-cve-announce/2025041605-CVE-2025-22055-e898@​gregkh/T

---

kernel: xsk: fix an integer overflow in xp_create_and_assign_umem()

CVE-2025-21997

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21997
• https://bugzilla.redhat.com/show_bug.cgi?id=2357143
• https://www.cve.org/CVERecord?id=CVE-2025-21997
• https://nvd.nist.gov/vuln/detail/CVE-2025-21997
• https://lore.kernel.org/linux-cve-announce/2025040348-CVE-2025-21997-492c@gregkh/T

---

kernel: vsock/virtio: discard packets if the transport changes

CVE-2025-21669

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21669
• https://bugzilla.redhat.com/show_bug.cgi?id=2343169
• https://www.cve.org/CVERecord?id=CVE-2025-21669
• https://nvd.nist.gov/vuln/detail/CVE-2025-21669
• https://lore.kernel.org/linux-cve-announce/2025013158-CVE-2025-21669-b52c@gregkh/T

---

kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up

CVE-2025-21887

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21887
• https://bugzilla.redhat.com/show_bug.cgi?id=2355405
• https://www.cve.org/CVERecord?id=CVE-2025-21887
• https://nvd.nist.gov/vuln/detail/CVE-2025-21887
• https://lore.kernel.org/linux-cve-announce/2025032714-CVE-2025-21887-48e8@​gregkh/T

---

kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy

CVE-2025-21979

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21979
• https://bugzilla.redhat.com/show_bug.cgi?id=2356652
• https://www.cve.org/CVERecord?id=CVE-2025-21979
• https://nvd.nist.gov/vuln/detail/CVE-2025-21979
• https://lore.kernel.org/linux-cve-announce/2025040148-CVE-2025-21979-1a5f@gregkh/T

---

kernel: cifs: Fix integer overflow while processing acdirmax mount option

CVE-2025-21963

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21963
• https://bugzilla.redhat.com/show_bug.cgi?id=2356642
• https://www.cve.org/CVERecord?id=CVE-2025-21963
• https://nvd.nist.gov/vuln/detail/CVE-2025-21963
• https://lore.kernel.org/linux-cve-announce/2025040145-CVE-2025-21963-6e21@​gregkh/T

---

kernel: keys: Fix UAF in key_put()

CVE-2025-21893

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21893
• https://bugzilla.redhat.com/show_bug.cgi?id=2356295
• https://www.cve.org/CVERecord?id=CVE-2025-21893
• https://nvd.nist.gov/vuln/detail/CVE-2025-21893
• https://lore.kernel.org/linux-cve-announce/2025033126-CVE-2025-21893-f2b4@​gregkh/T

---

kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd

CVE-2025-21969

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21969
• https://bugzilla.redhat.com/show_bug.cgi?id=2356633
• https://www.cve.org/CVERecord?id=CVE-2025-21969
• https://nvd.nist.gov/vuln/detail/CVE-2025-21969
• https://lore.kernel.org/linux-cve-announce/2025040146-CVE-2025-21969-d4f2@​gregkh/T

---

kernel: cifs: Fix integer overflow while processing closetimeo mount option

CVE-2025-21962

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21962
• https://bugzilla.redhat.com/show_bug.cgi?id=2356624
• https://www.cve.org/CVERecord?id=CVE-2025-21962
• https://nvd.nist.gov/vuln/detail/CVE-2025-21962
• https://lore.kernel.org/linux-cve-announce/2025040145-CVE-2025-21962-9f86@​gregkh/T

---

kernel: smb: client: fix UAF in decryption with multichannel

CVE-2025-37750

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-37750
• https://bugzilla.redhat.com/show_bug.cgi?id=2363341
• https://www.cve.org/CVERecord?id=CVE-2025-37750
• https://nvd.nist.gov/vuln/detail/CVE-2025-37750
• https://lore.kernel.org/linux-cve-announce/2025050136-CVE-2025-37750-fdd8@​gregkh/T

---

kernel: ndisc: use RCU protection in ndisc_alloc_skb()

CVE-2025-21764

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21764
• https://bugzilla.redhat.com/show_bug.cgi?id=2348575
• https://www.cve.org/CVERecord?id=CVE-2025-21764
• https://nvd.nist.gov/vuln/detail/CVE-2025-21764
• https://lore.kernel.org/linux-cve-announce/2025022605-CVE-2025-21764-1061@​gregkh/T

---

kernel: ext4: fix off-by-one error in do_split

CVE-2025-23150

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-23150
• https://bugzilla.redhat.com/show_bug.cgi?id=2363268
• https://www.cve.org/CVERecord?id=CVE-2025-23150
• https://nvd.nist.gov/vuln/detail/CVE-2025-23150
• https://lore.kernel.org/linux-cve-announce/2025050127-CVE-2025-23150-15b8@​gregkh/T

---

kernel: ext4: ignore xattrs past end

CVE-2025-37738

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-37738
• https://bugzilla.redhat.com/show_bug.cgi?id=2363305
• https://www.cve.org/CVERecord?id=CVE-2025-37738
• https://nvd.nist.gov/vuln/detail/CVE-2025-37738
• https://lore.kernel.org/linux-cve-announce/2025050132-CVE-2025-37738-deb1@​gregkh/T

---

kernel: sched/rt: Fix race in push_rt_task

CVE-2025-38234

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-38234
• https://bugzilla.redhat.com/show_bug.cgi?id=2376375
• https://www.cve.org/CVERecord?id=CVE-2025-38234
• https://nvd.nist.gov/vuln/detail/CVE-2025-38234
• https://lore.kernel.org/linux-cve-announce/2025070430-CVE-2025-38234-6984@​gregkh/T

---

kernel: proc: fix UAF in proc_get_inode()

CVE-2025-21999

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-21999
• https://bugzilla.redhat.com/show_bug.cgi?id=2357134
• https://www.cve.org/CVERecord?id=CVE-2025-21999
• https://nvd.nist.gov/vuln/detail/CVE-2025-21999
• https://lore.kernel.org/linux-cve-announce/2025040348-CVE-2025-21999-bc57@​gregkh/T

---

kernel: ibmvnic: Use kernel helpers for hex dumps

CVE-2025-22104

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-22104
• https://bugzilla.redhat.com/show_bug.cgi?id=2360265
• https://www.cve.org/CVERecord?id=CVE-2025-22104
• https://nvd.nist.gov/vuln/detail/CVE-2025-22104
• https://lore.kernel.org/linux-cve-announce/2025041622-CVE-2025-22104-0a82@​gregkh/T

---

kernel: ice: Fix deinitializing VF in error path

CVE-2025-21883

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-21883
• https://bugzilla.redhat.com/show_bug.cgi?id=2355415
• https://www.cve.org/CVERecord?id=CVE-2025-21883
• https://nvd.nist.gov/vuln/detail/CVE-2025-21883
• https://lore.kernel.org/linux-cve-announce/2025032712-CVE-2025-21883-8b73@​gregkh/T

---

kernel: eth: bnxt: fix truesize for mb-xdp-pass case

CVE-2025-21961

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-21961
• https://bugzilla.redhat.com/show_bug.cgi?id=2356584
• https://www.cve.org/CVERecord?id=CVE-2025-21961
• https://nvd.nist.gov/vuln/detail/CVE-2025-21961
• https://lore.kernel.org/linux-cve-announce/2025040144-CVE-2025-21961-5759@​gregkh/T

---

kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp

CVE-2025-37799

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-37799
• https://bugzilla.redhat.com/show_bug.cgi?id=2363876
• https://www.cve.org/CVERecord?id=CVE-2025-37799
• https://nvd.nist.gov/vuln/detail/CVE-2025-37799
• https://lore.kernel.org/linux-cve-announce/2025050349-CVE-2025-37799-bb83@​gregkh/T

---

kernel: ipv6: mcast: extend RCU protection in igmp6_send()

CVE-2025-21759

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21759
• https://bugzilla.redhat.com/show_bug.cgi?id=2348596
• https://www.cve.org/CVERecord?id=CVE-2025-21759
• https://nvd.nist.gov/vuln/detail/CVE-2025-21759
• https://lore.kernel.org/linux-cve-announce/2025022604-CVE-2025-21759-ad7c@gregkh/T

---

kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes

CVE-2025-21991

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21991
• https://bugzilla.redhat.com/show_bug.cgi?id=2356917
• https://www.cve.org/CVERecord?id=CVE-2025-21991
• https://nvd.nist.gov/vuln/detail/CVE-2025-21991
• https://lore.kernel.org/linux-cve-announce/2025040257-CVE-2025-21991-6aae@gregkh/T

---

kernel: exfat: fix random stack corruption after get_block

CVE-2025-22036

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-22036
• https://bugzilla.redhat.com/show_bug.cgi?id=2360231
• https://www.cve.org/CVERecord?id=CVE-2025-22036
• https://nvd.nist.gov/vuln/detail/CVE-2025-22036
• https://lore.kernel.org/linux-cve-announce/2025041658-CVE-2025-22036-6469@​gregkh/T

---

kernel: media: uvcvideo: Remove dangling pointers

CVE-2024-58002

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2024-58002
• https://bugzilla.redhat.com/show_bug.cgi?id=2348513
• https://www.cve.org/CVERecord?id=CVE-2024-58002
• https://nvd.nist.gov/vuln/detail/CVE-2024-58002
• https://lore.kernel.org/linux-cve-announce/2025022654-CVE-2024-58002-6f93@​gregkh/T

---

kernel: media: uvcvideo: Fix double free in error path

CVE-2024-57980

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2024-57980
• https://bugzilla.redhat.com/show_bug.cgi?id=2348599
• https://www.cve.org/CVERecord?id=CVE-2024-57980
• https://nvd.nist.gov/vuln/detail/CVE-2024-57980
• https://lore.kernel.org/linux-cve-announce/2025022634-CVE-2024-57980-4b5a@gregkh/T

---

kernel: wifi: iwlwifi: limit printed string from FW file

CVE-2025-21905

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21905
• https://bugzilla.redhat.com/show_bug.cgi?id=2356613
• https://www.cve.org/CVERecord?id=CVE-2025-21905
• https://nvd.nist.gov/vuln/detail/CVE-2025-21905
• https://lore.kernel.org/linux-cve-announce/2025040129-CVE-2025-21905-348b@gregkh/T

---

kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry

CVE-2025-37958

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-37958
• https://bugzilla.redhat.com/show_bug.cgi?id=2367572
• https://www.cve.org/CVERecord?id=CVE-2025-37958
• https://nvd.nist.gov/vuln/detail/CVE-2025-37958
• https://lore.kernel.org/linux-cve-announce/2025052003-CVE-2025-37958-02de@gregkh/T

---

kernel: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error

CVE-2025-38089

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-38089
• https://bugzilla.redhat.com/show_bug.cgi?id=2375529
• https://www.cve.org/CVERecord?id=CVE-2025-38089
• https://nvd.nist.gov/vuln/detail/CVE-2025-38089
• https://lore.kernel.org/linux-cve-announce/2025063055-CVE-2025-38089-0a36@​gregkh/T

---

kernel: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap

CVE-2025-38088

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-38088
• https://bugzilla.redhat.com/show_bug.cgi?id=2375528
• https://www.cve.org/CVERecord?id=CVE-2025-38088
• https://nvd.nist.gov/vuln/detail/CVE-2025-38088
• https://lore.kernel.org/linux-cve-announce/2025063054-CVE-2025-38088-4f48@​gregkh/T

---

kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling

CVE-2025-37797

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-37797
• https://bugzilla.redhat.com/show_bug.cgi?id=2363672
• https://www.cve.org/CVERecord?id=CVE-2025-37797
• https://nvd.nist.gov/vuln/detail/CVE-2025-37797
• https://lore.kernel.org/linux-cve-announce/2025050210-CVE-2025-37797-2aab@gregkh/T

---

kernel: RDMA/mlx5: Fix page_size variable overflow

CVE-2025-22091

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-22091
• https://bugzilla.redhat.com/show_bug.cgi?id=2360186
• https://www.cve.org/CVERecord?id=CVE-2025-22091
• https://nvd.nist.gov/vuln/detail/CVE-2025-22091
• https://lore.kernel.org/linux-cve-announce/2025041617-CVE-2025-22091-462d@gregkh/T

---

kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

CVE-2025-38110

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-38110
• https://bugzilla.redhat.com/show_bug.cgi?id=2376035
• https://www.cve.org/CVERecord?id=CVE-2025-38110
• https://nvd.nist.gov/vuln/detail/CVE-2025-38110
• https://lore.kernel.org/linux-cve-announce/2025070324-CVE-2025-38110-a9c0@​gregkh/T

---

kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()

CVE-2025-22121

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-22121
• https://bugzilla.redhat.com/show_bug.cgi?id=2360199
• https://www.cve.org/CVERecord?id=CVE-2025-22121
• https://nvd.nist.gov/vuln/detail/CVE-2025-22121
• https://lore.kernel.org/linux-cve-announce/2025041628-CVE-2025-22121-52fd@gregkh/T

---

kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove

CVE-2025-22020

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-22020
• https://bugzilla.redhat.com/show_bug.cgi?id=2360099
• https://www.cve.org/CVERecord?id=CVE-2025-22020
• https://nvd.nist.gov/vuln/detail/CVE-2025-22020
• https://lore.kernel.org/linux-cve-announce/2025041642-CVE-2025-22020-70e8@​gregkh/T

---

kernel: RDMA/core: Fix use-after-free when rename device name

CVE-2025-22085

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-22085
• https://bugzilla.redhat.com/show_bug.cgi?id=2360219
• https://www.cve.org/CVERecord?id=CVE-2025-22085
• https://nvd.nist.gov/vuln/detail/CVE-2025-22085
• https://lore.kernel.org/linux-cve-announce/2025041615-CVE-2025-22085-d167@​gregkh/T

---

kernel: nvme-tcp: sanitize request list handling

CVE-2025-38264

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-38264
• https://bugzilla.redhat.com/show_bug.cgi?id=2378996
• https://www.cve.org/CVERecord?id=CVE-2025-38264
• https://nvd.nist.gov/vuln/detail/CVE-2025-38264
• https://lore.kernel.org/linux-cve-announce/2025070937-CVE-2025-38264-ffd2@​gregkh/T

---

kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove()

CVE-2025-21929

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21929
• https://bugzilla.redhat.com/show_bug.cgi?id=2356594
• https://www.cve.org/CVERecord?id=CVE-2025-21929
• https://nvd.nist.gov/vuln/detail/CVE-2025-21929
• https://lore.kernel.org/linux-cve-announce/2025040133-CVE-2025-21929-bf29@​gregkh/T

---

kernel: net: ch9200: fix uninitialised access during mii_nway_restart

CVE-2025-38086

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-38086
• https://bugzilla.redhat.com/show_bug.cgi?id=2375305
• https://www.cve.org/CVERecord?id=CVE-2025-38086
• https://nvd.nist.gov/vuln/detail/CVE-2025-38086
• https://lore.kernel.org/linux-cve-announce/2025062801-CVE-2025-38086-783b@gregkh/T

---

kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc

CVE-2025-37890

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-37890
• https://bugzilla.redhat.com/show_bug.cgi?id=2366848
• https://www.cve.org/CVERecord?id=CVE-2025-37890
• https://nvd.nist.gov/vuln/detail/CVE-2025-37890
• https://lore.kernel.org/linux-cve-announce/2025051617-CVE-2025-37890-437b@gregkh/T

---

kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()

CVE-2025-21928

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21928
• https://bugzilla.redhat.com/show_bug.cgi?id=2356592
• https://www.cve.org/CVERecord?id=CVE-2025-21928
• https://nvd.nist.gov/vuln/detail/CVE-2025-21928
• https://lore.kernel.org/linux-cve-announce/2025040133-CVE-2025-21928-e444@​gregkh/T

---

kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

CVE-2025-38052

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-38052
• https://bugzilla.redhat.com/show_bug.cgi?id=2373380
• https://www.cve.org/CVERecord?id=CVE-2025-38052
• https://nvd.nist.gov/vuln/detail/CVE-2025-38052
• https://lore.kernel.org/linux-cve-announce/2025061832-CVE-2025-38052-6201@​gregkh/T

---

kernel: padata: fix UAF in padata_reorder

CVE-2025-21727

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21727
• https://bugzilla.redhat.com/show_bug.cgi?id=2348516
• https://www.cve.org/CVERecord?id=CVE-2025-21727
• https://nvd.nist.gov/vuln/detail/CVE-2025-21727
• https://lore.kernel.org/linux-cve-announce/2025022648-CVE-2025-21727-b034@​gregkh/T

---

kernel: ext4: avoid journaling sb update on error if journal is destroying

CVE-2025-22113

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-22113
• https://bugzilla.redhat.com/show_bug.cgi?id=2360212
• https://www.cve.org/CVERecord?id=CVE-2025-22113
• https://nvd.nist.gov/vuln/detail/CVE-2025-22113
• https://lore.kernel.org/linux-cve-announce/2025041625-CVE-2025-22113-34cd@gregkh/T

---

kernel: net/sched: fix use-after-free in taprio_dev_notifier

CVE-2025-38087

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-38087
• https://bugzilla.redhat.com/show_bug.cgi?id=2375531
• https://www.cve.org/CVERecord?id=CVE-2025-38087
• https://nvd.nist.gov/vuln/detail/CVE-2025-38087
• https://lore.kernel.org/linux-cve-announce/2025063052-CVE-2025-38087-cd0f@gregkh/T

---

kernel: mm/hugetlb: unshare page tables during VMA split, not before

CVE-2025-38084

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-38084
• https://bugzilla.redhat.com/show_bug.cgi?id=2375303
• https://www.cve.org/CVERecord?id=CVE-2025-38084
• https://nvd.nist.gov/vuln/detail/CVE-2025-38084
• https://lore.kernel.org/linux-cve-announce/2025062834-CVE-2025-38084-9121@​gregkh/T

---

kernel: crypto: algif_hash - fix double free in hash_accept

CVE-2025-38079

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-38079
• https://bugzilla.redhat.com/show_bug.cgi?id=2373383
• https://www.cve.org/CVERecord?id=CVE-2025-38079
• https://nvd.nist.gov/vuln/detail/CVE-2025-38079
• https://lore.kernel.org/linux-cve-announce/2025061841-CVE-2025-38079-7fa5@​gregkh/T

---

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array

CVE-2024-56721

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2024-56721
• https://bugzilla.redhat.com/show_bug.cgi?id=2334820
• https://www.cve.org/CVERecord?id=CVE-2024-56721
• https://nvd.nist.gov/vuln/detail/CVE-2024-56721
• https://lore.kernel.org/linux-cve-announce/2024122922-CVE-2024-56721-aaac@gregkh/T

---

kernel: wifi: ath12k: fix invalid access to memory

CVE-2025-38292

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-38292
• https://bugzilla.redhat.com/show_bug.cgi?id=2379219
• https://www.cve.org/CVERecord?id=CVE-2025-38292
• https://nvd.nist.gov/vuln/detail/CVE-2025-38292
• https://lore.kernel.org/linux-cve-announce/2025071011-CVE-2025-38292-e03a@gregkh/T

---

kernel: PCI/pwrctrl: Cancel outstanding rescan work when unregistering

CVE-2025-38137

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-38137
• https://bugzilla.redhat.com/show_bug.cgi?id=2376078
• https://www.cve.org/CVERecord?id=CVE-2025-38137
• https://nvd.nist.gov/vuln/detail/CVE-2025-38137
• https://lore.kernel.org/linux-cve-announce/2025070332-CVE-2025-38137-d4bf@gregkh/T

---

kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

CVE-2025-38159

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-38159
• https://bugzilla.redhat.com/show_bug.cgi?id=2376064
• https://www.cve.org/CVERecord?id=CVE-2025-38159
• https://nvd.nist.gov/vuln/detail/CVE-2025-38159
• https://lore.kernel.org/linux-cve-announce/2025070339-CVE-2025-38159-0c95@​gregkh/T

---

kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race

CVE-2025-38085

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-38085
• https://bugzilla.redhat.com/show_bug.cgi?id=2375304
• https://www.cve.org/CVERecord?id=CVE-2025-38085
• https://nvd.nist.gov/vuln/detail/CVE-2025-38085
• https://lore.kernel.org/linux-cve-announce/2025062836-CVE-2025-38085-8075@​gregkh/T

---

kernel: tls: always refresh the queue when reading sock

CVE-2025-38471

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-38471
• https://bugzilla.redhat.com/show_bug.cgi?id=2383893
• https://www.cve.org/CVERecord?id=CVE-2025-38471
• https://nvd.nist.gov/vuln/detail/CVE-2025-38471
• https://lore.kernel.org/linux-cve-announce/2025072812-CVE-2025-38471-ca92@​gregkh/T

---

kernel: i2c/designware: Fix an initialization issue

CVE-2025-38380

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-38380
• https://bugzilla.redhat.com/show_bug.cgi?id=2383381
• https://www.cve.org/CVERecord?id=CVE-2025-38380
• https://nvd.nist.gov/vuln/detail/CVE-2025-38380
• https://lore.kernel.org/linux-cve-announce/2025072505-CVE-2025-38380-d1a9@​gregkh/T

---

kernel: net: fix udp gso skb_segment after pull from frag_list

CVE-2025-38124

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-38124
• https://bugzilla.redhat.com/show_bug.cgi?id=2376041
• https://www.cve.org/CVERecord?id=CVE-2025-38124
• https://nvd.nist.gov/vuln/detail/CVE-2025-38124
• https://lore.kernel.org/linux-cve-announce/2025070328-CVE-2025-38124-bc19@​gregkh/T

---

kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()

CVE-2025-21867

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-21867
• https://bugzilla.redhat.com/show_bug.cgi?id=2355334
• https://www.cve.org/CVERecord?id=CVE-2025-21867
• https://nvd.nist.gov/vuln/detail/CVE-2025-21867
• https://lore.kernel.org/linux-cve-announce/2025032732-CVE-2025-21867-3138@​gregkh/T

---

kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush()

CVE-2025-38250

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-38250
• https://bugzilla.redhat.com/show_bug.cgi?id=2378982
• https://www.cve.org/CVERecord?id=CVE-2025-38250
• https://nvd.nist.gov/vuln/detail/CVE-2025-38250
• https://lore.kernel.org/linux-cve-announce/2025070934-CVE-2025-38250-3145@​gregkh/T

---

kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw

CVE-2025-38200

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-38200
• https://bugzilla.redhat.com/show_bug.cgi?id=2376392
• https://www.cve.org/CVERecord?id=CVE-2025-38200
• https://nvd.nist.gov/vuln/detail/CVE-2025-38200
• https://lore.kernel.org/linux-cve-announce/2025070418-CVE-2025-38200-47d9@​gregkh/T

---

kernel: ice: fix eswitch code memory leak in reset scenario

CVE-2025-38417

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-38417
• https://bugzilla.redhat.com/show_bug.cgi?id=2383463
• https://www.cve.org/CVERecord?id=CVE-2025-38417
• https://nvd.nist.gov/vuln/detail/CVE-2025-38417
• https://lore.kernel.org/linux-cve-announce/2025072546-CVE-2025-38417-12d4@​gregkh/T

---

kernel: net_sched: ets: Fix double list add in class with netem as child qdisc

CVE-2025-37914

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-37914
• https://bugzilla.redhat.com/show_bug.cgi?id=2367500
• https://www.cve.org/CVERecord?id=CVE-2025-37914
• https://nvd.nist.gov/vuln/detail/CVE-2025-37914
• https://lore.kernel.org/linux-cve-announce/2025052000-CVE-2025-37914-1a4f@gregkh/T

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).