Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724) * kernel: smb: client: fix race with concurrent opens in rename(2) (CVE-2025-39825) * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883) * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898) * kernel: nbd: fix incomplete validation of ioctl arg (CVE-2023-53513) * kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724) * kernel: smb: client: fix race with concurrent opens in rename(2) (CVE-2025-39825) * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883) * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898) * kernel: nbd: fix incomplete validation of ioctl arg (CVE-2023-53513) * kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
05 / REFERENCES
Further evidence
- https://access.redhat.com/errata/RHSA-2025:22387
- https://access.redhat.com/security/cve/CVE-2023-53513
- https://access.redhat.com/security/cve/CVE-2025-38724
- https://access.redhat.com/security/cve/CVE-2025-39825
- https://access.redhat.com/security/cve/CVE-2025-39883
- https://access.redhat.com/security/cve/CVE-2025-39898
- https://access.redhat.com/security/cve/CVE-2025-39955
- https://bugzilla.redhat.com/2393172
- https://bugzilla.redhat.com/2395792
- https://bugzilla.redhat.com/2397553
- https://bugzilla.redhat.com/2400598
- https://bugzilla.redhat.com/2400795
- https://bugzilla.redhat.com/2402699
- https://errata.almalinux.org/8/ALSA-2025-22387.html