Linux · Security advisory · November 3, 2025

RHSA-2025:19409: Security update for 2 packages

RHSA-2025:19409, released November 3, 2025, fixes 3 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0045
39th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-rt-debug-kvmRHEL 90:5.14.0-570.60.1.el9_6
kernel-rt-kvmRHEL 90:5.14.0-570.60.1.el9_6

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-39702 ipv6: sr: Fix MAC comparison to be constant-time 7.1 0.0045 None reported
High CVE-2022-50367 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x... 7.8 0.0023 None reported
High CVE-2023-53494 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 7.8 0.0016 None reported
Showing 1 to 3 of 3 1