Stay Secure with the Latest Linux Advisories

security advisorymoderatekernel

Rocky Linux 9 Kernel Moderate Security Update CVE-2025-39806

Moderate: kernel security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:0445", "synopsis": "Moderate: kernel security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for kernel.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)\n\n* kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840)\n\n* kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)\n\n* kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2395807", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2395807", "description": ""}, {"ticket": "2396936", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2396936", "description": ""}, {"ticket": "2397553", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2397553", "description": ""}, {"ticket": "2418832", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2418832", "description": ""}], "cves": [{"name": "CVE-2025-39806", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2025-39806", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H", "cvss3BaseScore": "5.8", "cwe": "CWE-787"}, {"name": "CVE-2025-39840", "sourceBy": "MITRE", "sourceLink":"https://www.cve.org/CVERecord?id=CVE-2025-39840", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "cvss3BaseScore": "7.0", "cwe": "CWE-125"}, {"name": "CVE-2025-39883", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2025-39883", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "cvss3BaseScore": "7.0", "cwe": "CWE-416"}, {"name": "CVE-2025-40240", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2025-40240", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-476"}], "references": [], "publishedAt": "2026-01-17T09:05:06.143150Z", "rpms": {"Rocky Linux 9": {"nvras": ["kernel-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-64k-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-debug-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-debug-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-debug-debuginfo-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-debug-devel-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-debug-devel-matched-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-0:5.14.0-611.20.1.el9_7.src.rpm", "kernel-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-64k-debuginfo-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-debug-modules-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-debug-modules-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-debug-modules-extra-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-devel-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-devel-matched-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-modules-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-modules-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-64k-modules-extra-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-abi-stablelists-0:5.14.0-611.20.1.el9_7.noarch.rpm", "kernel-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm","kernel-core-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-core-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-core-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-debug-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-debug-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-debug-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-debug-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-debug-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-debug-core-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-debug-core-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-debug-core-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-debug-debuginfo-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-debug-debuginfo-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-debug-debuginfo-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-debug-debuginfo-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-debug-devel-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-debug-devel-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-debug-devel-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-debug-devel-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-debug-devel-matched-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-debug-devel-matched-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-debug-devel-matched-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-debug-devel-matched-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-debuginfo-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-debuginfo-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-debuginfo-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-debuginfo-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-debuginfo-common-aarch64-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-debuginfo-common-ppc64le-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-debuginfo-common-s390x-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-debuginfo-common-x86_64-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-debug-modules-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-debug-modules-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-debug-modules-0:5.14.0-611.20.1.el9_7.s390x.rpm","kernel-debug-modules-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-debug-modules-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-debug-modules-core-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-debug-modules-core-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-debug-modules-core-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-debug-modules-extra-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-debug-modules-extra-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-debug-modules-extra-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-debug-modules-extra-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-debug-uki-virt-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-devel-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-devel-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-devel-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-devel-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-devel-matched-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-devel-matched-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-devel-matched-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-devel-matched-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-doc-0:5.14.0-611.20.1.el9_7.noarch.rpm", "kernel-modules-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-modules-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-modules-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-modules-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-modules-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-modules-core-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-modules-core-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-modules-core-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-modules-extra-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-modules-extra-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-modules-extra-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-modules-extra-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-64k-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-64k-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm","kernel-rt-64k-debug-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-64k-debug-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-64k-debug-debuginfo-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-64k-debug-devel-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-64k-debuginfo-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-64k-debug-modules-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-64k-debug-modules-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-64k-debug-modules-extra-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-64k-devel-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-64k-modules-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-64k-modules-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-64k-modules-extra-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-core-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-debug-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-debug-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-debug-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-debug-core-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-debug-debuginfo-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-debug-debuginfo-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-debug-devel-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-debug-devel-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-debuginfo-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-debuginfo-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-debug-modules-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-debug-modules-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-debug-modules-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-debug-modules-core-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-debug-modules-extra-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-debug-modules-extra-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-devel-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-devel-0:5.14.0-611.20.1.el9_7.x86_64.rpm","kernel-rt-modules-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-modules-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-modules-core-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-modules-core-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-rt-modules-extra-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-rt-modules-extra-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-tools-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-tools-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-tools-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-tools-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-tools-debuginfo-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-tools-debuginfo-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-tools-debuginfo-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-tools-debuginfo-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-tools-libs-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-tools-libs-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-tools-libs-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-tools-libs-devel-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "kernel-tools-libs-devel-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "kernel-tools-libs-devel-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-uki-virt-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-uki-virt-addons-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "kernel-zfcpdump-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-zfcpdump-core-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-zfcpdump-debuginfo-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-zfcpdump-devel-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-zfcpdump-devel-matched-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-zfcpdump-modules-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-zfcpdump-modules-core-0:5.14.0-611.20.1.el9_7.s390x.rpm", "kernel-zfcpdump-modules-extra-0:5.14.0-611.20.1.el9_7.s390x.rpm", "libperf-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "libperf-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "libperf-0:5.14.0-611.20.1.el9_7.s390x.rpm", "libperf-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "libperf-debuginfo-0:5.14.0-611.20.1.el9_7.aarch64.rpm","libperf-debuginfo-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "libperf-debuginfo-0:5.14.0-611.20.1.el9_7.s390x.rpm", "libperf-debuginfo-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "perf-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "perf-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "perf-0:5.14.0-611.20.1.el9_7.s390x.rpm", "perf-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "perf-debuginfo-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "perf-debuginfo-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "perf-debuginfo-0:5.14.0-611.20.1.el9_7.s390x.rpm", "perf-debuginfo-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "python3-perf-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "python3-perf-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "python3-perf-0:5.14.0-611.20.1.el9_7.s390x.rpm", "python3-perf-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "python3-perf-debuginfo-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "python3-perf-debuginfo-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "python3-perf-debuginfo-0:5.14.0-611.20.1.el9_7.s390x.rpm", "python3-perf-debuginfo-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "rtla-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "rtla-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "rtla-0:5.14.0-611.20.1.el9_7.s390x.rpm", "rtla-0:5.14.0-611.20.1.el9_7.x86_64.rpm", "rv-0:5.14.0-611.20.1.el9_7.aarch64.rpm", "rv-0:5.14.0-611.20.1.el9_7.ppc64le.rpm", "rv-0:5.14.0-611.20.1.el9_7.s390x.rpm", "rv-0:5.14.0-611.20.1.el9_7.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Moderate security update for Rocky Linux 9's kernel fixing multiple critical issues to ensure system integrity.. kernel security, Rocky Linux 9, system integrity, software updates. . LinuxSecurity.com Team

Jan 17, 2026 Rocky Linux