ALSA-2025:22387
- Source
- https://errata.almalinux.org/8/ALSA-2025-22387.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:22387.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2025:22387
- Related
- Published
- 2025-12-01T00:00:00Z
- Modified
- 2025-12-05T12:24:25.552184Z
- Summary
- Moderate: kernel-rt security update
- Details
-
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
- kernel: nfsd: handle getclientlocked() failure in nfsd4setclientidconfirm() (CVE-2025-38724)
- kernel: smb: client: fix race with concurrent opens in rename(2) (CVE-2025-39825)
- kernel: mm/memory-failure: fix VMBUGON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
- kernel: e1000e: fix heap overflow in e1000seteeprom (CVE-2025-39898)
- kernel: nbd: fix incomplete validation of ioctl arg (CVE-2023-53513)
- kernel: tcp: Clear tcpsk(sk)->fastopenrsk in tcp_disconnect() (CVE-2025-39955)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2025:22387
- https://access.redhat.com/security/cve/CVE-2023-53513
- https://access.redhat.com/security/cve/CVE-2025-38724
- https://access.redhat.com/security/cve/CVE-2025-39825
- https://access.redhat.com/security/cve/CVE-2025-39883
- https://access.redhat.com/security/cve/CVE-2025-39898
- https://access.redhat.com/security/cve/CVE-2025-39955
- https://bugzilla.redhat.com/2393172
- https://bugzilla.redhat.com/2395792
- https://bugzilla.redhat.com/2397553
- https://bugzilla.redhat.com/2400598
- https://bugzilla.redhat.com/2400795
- https://bugzilla.redhat.com/2402699
- https://errata.almalinux.org/8/ALSA-2025-22387.html