Linux · Security advisory · December 9, 2025

RHSA-2025:22865: Security update for 72 packages

RHSA-2025:22865, released December 9, 2025, fixes 2 CVEs across 72 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

1 rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0015

4th percentile

Priority of the 2 CVEs

Patch now 0
                                Urgent 1
                                High 1
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-debug	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-debug-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-debug-devel	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-debug-devel-matched	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-debug-modules	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-debug-modules-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-debug-modules-extra	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-devel	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-devel-matched	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-modules	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-modules-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-64k-modules-extra	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-abi-stablelists	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-debug	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-debug-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-debug-devel	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-debug-devel-matched	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-debug-modules	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-debug-modules-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-debug-modules-extra	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-debug-uki-virt	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-devel	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-devel-matched	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-doc	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-modules	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-modules-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-modules-extra	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-64k	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-64k-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-64k-debug	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-64k-debug-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-64k-debug-devel	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-64k-debug-modules	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-64k-debug-modules-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-64k-debug-modules-extra	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-64k-devel	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-64k-modules	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-64k-modules-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-64k-modules-extra	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-debug	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-debug-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-debug-devel	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-debug-modules	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-debug-modules-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-debug-modules-extra	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-devel	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-modules	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-modules-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-rt-modules-extra	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-tools	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-tools-libs	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-tools-libs-devel	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-uki-virt	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-uki-virt-addons	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-zfcpdump	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-zfcpdump-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-zfcpdump-devel	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-zfcpdump-devel-matched	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-zfcpdump-modules	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-zfcpdump-modules-core	RHEL 9	0:5.14.0-611.13.1.el9_7
kernel-zfcpdump-modules-extra	RHEL 9	0:5.14.0-611.13.1.el9_7
libperf	RHEL 9	0:5.14.0-611.13.1.el9_7
perf	RHEL 9	0:5.14.0-611.13.1.el9_7
python3-perf	RHEL 9	0:5.14.0-611.13.1.el9_7
rtla	RHEL 9	0:5.14.0-611.13.1.el9_7
rv	RHEL 9	0:5.14.0-611.13.1.el9_7

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Urgent	CVE-2025-39925	can: j1939: implement NETDEV_UNREGISTER notification handler		9.8	0.0015	None reported
High	CVE-2025-39979	linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, fix UAF in flow counter release F...		7.8	0.0015	None reported

Also fixes CVE-2025-39925

OPENSUSE-SU-2025:20081-1
dtb-aarch64, kernel-64kb, kernel-default and 9 more on opensuse-leap 16.0
SUSE-SU-2025:21139-1
kernel-64kb, kernel-default, kernel-default-base and 6 more on sles 16.0
SUSE-SU-2025:03634-1
kernel-azure, kernel-source-azure, kernel-syms-azure on opensuse-leap 15.6, sles 15.6
SUSE-SU-2025:3751-1
kernel-livepatch-SLE15-SP6-RT_Update_16, kernel-rt, kernel-rt_debug and 2 more on opensuse-leap 15.6, sles 15.6
SUSE-SU-2025:03600-1
dtb-aarch64, kernel-64kb, kernel-debug and 10 more on opensuse-leap 15.6, sles 15.6
SUSE-SU-2025:4057-1
kernel-64kb, kernel-default, kernel-default-base and 6 more on sles 15.7
SUSE-SU-2025:4141-1
kernel-livepatch-SLE15-SP7-RT_Update_6 on sles 15.7
SUSE-SU-2025:4132-1
kernel-azure, kernel-source-azure, kernel-syms-azure on sles 15.7

Vendor advisory

https://access.redhat.com/errata/RHSA-2025:22865

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo