p PatchFirst

RLSA-2025:16904

RLSA-2025:16904 · Moderate: kernel security update

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (CVE-2025-38396) * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527) * kernel: cifs: Fix the smbd_response slab to allow usercopy (CVE-2025-38523) * kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682) * kernel: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CVE-2025-39698) * kernel: s390/sclp: Fix SCCB present check (CVE-2025-39694) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 7.3 · Élevée · Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • kernel Rocky Linux:10

    Plages de versions concernées
    • ECOSYSTEM: < 0:6.12.0-55.37.1.el10_0

    Mettez à jour vers 0:6.12.0-55.37.1.el10_0

Sources originales

Vérifiez votre serveur →