RLSA-2025:22388

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: nfsd: handle getclientlocked() failure in nfsd4setclientidconfirm() (CVE-2025-38724)

• kernel: smb: client: fix race with concurrent opens in rename(2) (CVE-2025-39825)

• kernel: mm/memory-failure: fix VMBUGON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)

• kernel: e1000e: fix heap overflow in e1000seteeprom (CVE-2025-39898)

• kernel: nbd: fix incomplete validation of ioctl arg (CVE-2023-53513)

• kernel: tcp: Clear tcpsk(sk)->fastopenrsk in tcp_disconnect() (CVE-2025-39955)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.