RLSA-2025:12746

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

• kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove() (CVE-2025-21928)

• kernel: HID: intel-ish-hid: Fix use-after-free issue in hidishtpcl_remove() (CVE-2025-21929)

• kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962)

• kernel: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove (CVE-2025-22020)

• kernel: misc/vmwvmci: fix an infoleak in vmcihostdoreceive_datagram() (CVE-2022-49788)

• kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)

• kernel: net/tipc: fix slab-use-after-free Read in tipcaeadencrypt_done (CVE-2025-38052)

• kernel: net/sched: fix use-after-free in tapriodevnotifier (CVE-2025-38087)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.