Linux · Security advisory · October 20, 2025
RHSA-2025:18281: Security update for 74 packages
RHSA-2025:18281, released October 20, 2025, fixes 7 CVEs across 74 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0063
50th percentile
Priority of the 7 CVEs
Patch now 0
Urgent 0
High 7
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-debug | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-debug-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-debug-devel | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-debug-devel-matched | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-debug-modules | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-debug-modules-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-debug-modules-extra | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-devel | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-devel-matched | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-modules | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-modules-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-64k-modules-extra | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-abi-stablelists | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-debug | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-debug-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-debug-devel | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-debug-devel-matched | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-debug-modules | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-debug-modules-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-debug-modules-extra | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-debug-uki-virt | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-devel | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-devel-matched | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-doc | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-modules | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-modules-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-modules-extra | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-64k | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-64k-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-64k-debug | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-64k-debug-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-64k-debug-devel | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-64k-debug-modules | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-64k-debug-modules-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-64k-debug-modules-extra | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-64k-devel | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-64k-modules | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-64k-modules-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-64k-modules-extra | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-debug | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-debug-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-debug-devel | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-debug-kvm | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-debug-modules | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-debug-modules-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-debug-modules-extra | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-devel | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-kvm | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-modules | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-modules-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-rt-modules-extra | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-tools | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-tools-libs | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-tools-libs-devel | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-uki-virt | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-uki-virt-addons | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-zfcpdump | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-zfcpdump-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-zfcpdump-devel | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-zfcpdump-devel-matched | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-zfcpdump-modules | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-zfcpdump-modules-core | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| kernel-zfcpdump-modules-extra | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| libperf | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| perf | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| python3-perf | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| rtla | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
| rv | RHEL 9 | 0:5.14.0-570.55.1.el9_6 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2025-38566 | sunrpc: fix handling of server side tls alerts | 8.1 | 0.0063 | None reported | |
| High | CVE-2025-39841 | scsi: lpfc: Fix buffer free/clear order in deferred receive path | 7.8 | 0.0048 | None reported | |
| High | CVE-2025-38571 | sunrpc: fix client side handling of tls alerts | 8.1 | 0.0035 | None reported | |
| High | CVE-2025-39849 | wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() | 7.8 | 0.0022 | None reported | |
| High | CVE-2025-22026 | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.5 | 0.0021 | None reported | |
| High | CVE-2022-50087 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.8 | 0.0020 | None reported | |
| High | CVE-2025-39817 | efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare | 7.6 | 0.0017 | None reported |
Showing 1 to 7 of 7
1