RHSA-2025:21760MediumCVSS 7.8

Red Hat Security Advisory: kernel security update

Published
November 19, 2025
Last Modified
June 29, 2026

🔗 CVE IDs covered (9)

CVE-2025-38718 →CVE-2025-38729 →CVE-2025-39702 →CVE-2025-39817 →CVE-2023-53494 →CVE-2025-39697 →CVE-2025-39757 →CVE-2025-39849 →CVE-2025-40300 →

📋 Description

CVE-2023-53494 — kernel: crypto: xts - Handle EBUSY correctly CVE-2025-38718 — kernel: sctp: linearize cloned gso packets in sctp_rcv CVE-2025-38729 — kernel: ALSA: usb-audio: Validate UAC3 power domain descriptors, too CVE-2025-39697 — kernel: NFS: Fix a race when updating an existing write CVE-2025-39702 — kernel: ipv6: sr: Fix MAC comparison to be constant-time CVE-2025-39757 — kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors CVE-2025-39817 — kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare CVE-2025-39849 — kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() CVE-2025-40300 — kernel: x86/vmscape: Add conditional IBPB mitigation

🔗 References (12)