RLSA-2025:9079

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: ndisc: use RCU protection in ndiscallocskb() (CVE-2025-21764)

• kernel: ovl: fix UAF in ovldentryupdatereval by moving dput() in ovllink_up (CVE-2025-21887)

• kernel: keys: Fix UAF in key_put() (CVE-2025-21893)

• kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962)

• kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2capsendcmd (CVE-2025-21969)

• kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963)

• kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979)

• kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.