RHSA-2025:13781MediumCVSS 7.8

Red Hat Security Advisory: kernel security update

Published
August 13, 2025
Last Modified
August 4, 2026

🔗 CVE IDs covered (9)

CVE-2025-21727 →CVE-2025-21928 →CVE-2025-21991 →CVE-2025-37797 →CVE-2025-38086 →CVE-2022-49788 →CVE-2022-50200 →CVE-2024-58002 →CVE-2025-22020 →

📋 Description

CVE-2022-49788 — kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() CVE-2022-50200 — kernel: selinux: Add boundary check in put_entry() CVE-2024-58002 — kernel: media: uvcvideo: Remove dangling pointers CVE-2025-21727 — kernel: padata: fix UAF in padata_reorder CVE-2025-21928 — kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() CVE-2025-21991 — kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes CVE-2025-22020 — kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove CVE-2025-37797 — kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling CVE-2025-38086 — kernel: net: ch9200: fix uninitialised access during mii_nway_restart

🎯 Affected products169

  • Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-0:7.0.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-0:7.0.0-284.130.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-0:7.0.0-284.130.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-0:7.0.0-284.130.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.130.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.130.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.130.1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.130.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.130.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • bpftool-debuginfo-0:7.0.0-284.130.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-0:5.14.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-0:5.14.0-284.130.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-0:5.14.0-284.130.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-0:5.14.0-284.130.1.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-0:5.14.0-284.130.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-0:5.14.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-core-0:5.14.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-debug-0:5.14.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-debug-core-0:5.14.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-debug-debuginfo-0:5.14.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • kernel-64k-debug-debuginfo-0:5.14.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-debug-devel-0:5.14.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • kernel-64k-debug-devel-matched-0:5.14.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • kernel-64k-debug-modules-0:5.14.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-debug-modules-core-0:5.14.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • kernel-64k-debug-modules-extra-0:5.14.0-284.130.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • +139 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: In order to mitigate this issue it is possible to prevent the affected code from being loaded by blacklisting the kernel "USB Video Class module" (uvcvideo) module . For instructions relating to how to blacklist a kernel module refer to: https://access.redhat.com/solutions/41278uvcvideoz Workaround: To mitigate this issue, prevent module sch_hfsc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.

🔗 References (12)