红帽产品勘误 RHSA-2025:12753 - Security Advisory
发布：
2025-08-04
已更新：
2025-08-04

RHSA-2025:12753 - Security Advisory

概述

Important: kernel-rt security update

类型/严重性

Security Advisory: Important

Red Hat Insights 补丁分析

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)
  • kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020)
  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)
  • kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052)
  • kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)
  • kernel: ext4: avoid resizing to a partial cluster size (CVE-2022-50020)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

受影响的产品

  • Red Hat Enterprise Linux for Real Time 8 x86_64
  • Red Hat Enterprise Linux for Real Time for NFV 8 x86_64

修复

  • BZ - 2356592 - CVE-2025-21928 kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  • BZ - 2360099 - CVE-2025-22020 kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
  • BZ - 2366848 - CVE-2025-37890 kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
  • BZ - 2373380 - CVE-2025-38052 kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
  • BZ - 2373383 - CVE-2025-38079 kernel: crypto: algif_hash - fix double free in hash_accept
  • BZ - 2373630 - CVE-2022-50020 kernel: ext4: avoid resizing to a partial cluster size

Red Hat Enterprise Linux for Real Time 8

SRPM
kernel-rt-4.18.0-553.66.1.rt7.407.el8_10.src.rpm SHA-256: 3296bdb184bfa97b91ea7df703ec899bcfe2020956b9815eaac728b8002b788b
x86_64
kernel-rt-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 3e269aff130c38b2a774dbb6598bbe7f49f8f9fc7a1b6792c750279cfe09cacd
kernel-rt-core-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: b47e6d1847a02acb48316b08e8d5778f918a9e9e6a2f8d918fbfc1ec81ffe905
kernel-rt-debug-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: a6c59bd22ac466140d22a6e8a0de1271b1d493771d74f013fad846612c7005a9
kernel-rt-debug-core-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 81a94b6d26695dc3c934c07c87d62f2f6d15c018dc1bbe9a9cf8c6a23ab65383
kernel-rt-debug-debuginfo-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: f50de1f74422fdd9a00e60cf47bc826de8ba89075c858b2c6de8eb80bd423e20
kernel-rt-debug-devel-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 679a155f47de9fa54bd21e91a03a88c6a77f8fe0f21b1633dc26cf40d00f3aba
kernel-rt-debug-modules-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 1b9c022d5241707e34fe152efa5606ac185ebdf7cfb86b1b2ac41c4cbc118353
kernel-rt-debug-modules-extra-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 7d0ce4002eca828104a711eca1f2218ff89c43204ef9f4f49be8816794df1afe
kernel-rt-debuginfo-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 5aee6e8419bb5152cf380a8edde076d7c4781b7d9095c61439f4643425856c2d
kernel-rt-debuginfo-common-x86_64-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 472c6b650660d3cfd5b0f5dcf10415767c67d48c7fd967fe52fa12b5c9bcac3d
kernel-rt-devel-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 7f80338f03f3c1319d2a270841eb81071fd8ba6ba1e0482cb4e92fe451cb2725
kernel-rt-modules-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 8be963e260b65941969447eb3020e9d294626262182b936b40b7b9edc07b15c9
kernel-rt-modules-extra-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: bda0f1313e999d70373f5b435a71c95263ef543bd58bf82f45eb0767522d8f76

Red Hat Enterprise Linux for Real Time for NFV 8

SRPM
kernel-rt-4.18.0-553.66.1.rt7.407.el8_10.src.rpm SHA-256: 3296bdb184bfa97b91ea7df703ec899bcfe2020956b9815eaac728b8002b788b
x86_64
kernel-rt-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 3e269aff130c38b2a774dbb6598bbe7f49f8f9fc7a1b6792c750279cfe09cacd
kernel-rt-core-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: b47e6d1847a02acb48316b08e8d5778f918a9e9e6a2f8d918fbfc1ec81ffe905
kernel-rt-debug-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: a6c59bd22ac466140d22a6e8a0de1271b1d493771d74f013fad846612c7005a9
kernel-rt-debug-core-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 81a94b6d26695dc3c934c07c87d62f2f6d15c018dc1bbe9a9cf8c6a23ab65383
kernel-rt-debug-debuginfo-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: f50de1f74422fdd9a00e60cf47bc826de8ba89075c858b2c6de8eb80bd423e20
kernel-rt-debug-devel-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 679a155f47de9fa54bd21e91a03a88c6a77f8fe0f21b1633dc26cf40d00f3aba
kernel-rt-debug-kvm-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 7c3347643fa02bc3bd8a1739a939d29eb0912e9f6076fc7fa207e1d02ede76de
kernel-rt-debug-modules-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 1b9c022d5241707e34fe152efa5606ac185ebdf7cfb86b1b2ac41c4cbc118353
kernel-rt-debug-modules-extra-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 7d0ce4002eca828104a711eca1f2218ff89c43204ef9f4f49be8816794df1afe
kernel-rt-debuginfo-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 5aee6e8419bb5152cf380a8edde076d7c4781b7d9095c61439f4643425856c2d
kernel-rt-debuginfo-common-x86_64-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 472c6b650660d3cfd5b0f5dcf10415767c67d48c7fd967fe52fa12b5c9bcac3d
kernel-rt-devel-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 7f80338f03f3c1319d2a270841eb81071fd8ba6ba1e0482cb4e92fe451cb2725
kernel-rt-kvm-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: e3ef86431312dcd2ac4574e73636fb4171ed6623c05ffcebc59a20ba75c8a1a1
kernel-rt-modules-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: 8be963e260b65941969447eb3020e9d294626262182b936b40b7b9edc07b15c9
kernel-rt-modules-extra-4.18.0-553.66.1.rt7.407.el8_10.x86_64.rpm SHA-256: bda0f1313e999d70373f5b435a71c95263ef543bd58bf82f45eb0767522d8f76

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。