RLSA-2025:15011

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: netsched: hfsc: Fix a potential UAF in hfscdequeue() too (CVE-2025-37823)

• kernel: i40e: fix MMIO write access to an invalid page in i40eclearhw (CVE-2025-38200)

• kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)

• kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)

• kernel: tipc: Fix use-after-free in tipcconnclose() (CVE-2025-38464)

• kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461)

• kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.