Linux · Security advisory · December 8, 2025

ALSA-2025:22854: Security update for 2 packages

ALSA-2025:22854, released December 8, 2025, fixes 9 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
9
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0039
33rd percentile

Priority of the 9 CVEs

Patch now 0 Urgent 1 High 8 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-abi-stablelistsalmalinux 106.12.0-124.20.1.el10_1
kernel-docalmalinux 106.12.0-124.20.1.el10_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-39925 can: j1939: implement NETDEV_UNREGISTER notification handler 9.8 0.0015 None reported
High CVE-2025-38737 kernel: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix... 7.8 0.0039 None reported
High CVE-2025-39982 Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync 8.8 0.0028 None reported
High CVE-2025-39983 linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_conn_tx_deq... 8.8 0.0025 None reported
High CVE-2025-40185 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 7.8 0.0021 None reported
High CVE-2025-40058 linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoheren... 8.8 0.0016 None reported
High CVE-2025-40047 linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry i... 7.8 0.0016 None reported
High CVE-2025-39981 Bluetooth: MGMT: Fix possible UAFs 7.8 0.0015 None reported
High CVE-2025-39979 linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, fix UAF in flow counter release F... 7.8 0.0015 None reported
Showing 1 to 9 of 9 1