Linux · Security advisory · September 23, 2025

RHSA-2025:21118: kernel security update

RHSA-2025:21118, released September 23, 2025, fixes 11 CVEs in kernel (version 6.12.0-124.9.1.el10_1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
11
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0048
41st percentile

Priority of the 11 CVEs

Patch now 0 Urgent 0 High 11 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelRHEL 106.12.0-124.9.1.el10_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-39841 scsi: lpfc: Fix buffer free/clear order in deferred receive path 7.8 0.0048 None reported
High CVE-2025-39702 ipv6: sr: Fix MAC comparison to be constant-time 7.1 0.0045 None reported
High CVE-2025-39849 wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() 7.8 0.0022 None reported
High CVE-2025-38498 do_change_type(): refuse to operate on unmounted/not ours mounts 7.9 0.0022 None reported
High CVE-2025-39757 ALSA: usb-audio: Validate UAC3 cluster segment descriptors 7.8 0.0018 None reported
High CVE-2025-39727 kernel: In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setup_... 7.8 0.0018 None reported
High CVE-2025-39718 vsock/virtio: Validate length in packet header before skb_put() 7.8 0.0017 None reported
High CVE-2025-39817 efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare 7.6 0.0017 None reported
High CVE-2025-39697 NFS: Fix a race when updating an existing write 7.6 0.0016 None reported
High CVE-2025-39881 kernfs: Fix UAF in polling when open file is released 7.8 0.0015 None reported
High CVE-2025-39751 ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control 7.8 n/a None reported
Showing 1 to 11 of 11 1