RLSA-2025:19102

Synopsis

Moderate: kernel security update

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CVE-2023-53297)

* kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)

* kernel: Bluetooth: Fix potential use-after-free when clear keys (CVE-2023-53386)

* kernel: Bluetooth: L2CAP: Fix user-after-free (CVE-2022-50386)

* kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849)

* kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2395681 2395805 2396419 2396431 2396928 2396944

CVEs

CVE-2022-50386 CVE-2023-53297 CVE-2023-53386 CVE-2025-39817 CVE-2025-39841 CVE-2025-39849

Affected packages

Rocky Linux 8 aarch64 - BaseOS

bpftool-0:4.18.0-553.81.1.el8_10.aarch64.rpm bpftool-debuginfo-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-0:4.18.0-553.81.1.el8_10.src.rpm kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch.rpm kernel-core-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-debug-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-debug-core-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-debug-debuginfo-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-debug-devel-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-debuginfo-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-debuginfo-common-aarch64-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-debug-modules-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-devel-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-doc-0:4.18.0-553.81.1.el8_10.noarch.rpm kernel-modules-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-modules-extra-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-tools-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-tools-debuginfo-0:4.18.0-553.81.1.el8_10.aarch64.rpm kernel-tools-libs-0:4.18.0-553.81.1.el8_10.aarch64.rpm perf-0:4.18.0-553.81.1.el8_10.aarch64.rpm perf-debuginfo-0:4.18.0-553.81.1.el8_10.aarch64.rpm python3-perf-0:4.18.0-553.81.1.el8_10.aarch64.rpm python3-perf-debuginfo-0:4.18.0-553.81.1.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - BaseOS

bpftool-0:4.18.0-553.81.1.el8_10.x86_64.rpm bpftool-debuginfo-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-0:4.18.0-553.81.1.el8_10.src.rpm kernel-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch.rpm kernel-core-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-debug-debuginfo-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-debuginfo-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-debuginfo-common-x86_64-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-doc-0:4.18.0-553.81.1.el8_10.noarch.rpm kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-tools-debuginfo-0:4.18.0-553.81.1.el8_10.x86_64.rpm kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64.rpm perf-0:4.18.0-553.81.1.el8_10.x86_64.rpm perf-debuginfo-0:4.18.0-553.81.1.el8_10.x86_64.rpm python3-perf-0:4.18.0-553.81.1.el8_10.x86_64.rpm python3-perf-debuginfo-0:4.18.0-553.81.1.el8_10.x86_64.rpm

Rocky Linux 8 aarch64 - PowerTools

kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - PowerTools

kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64.rpm