Critical Security Update for Kernel Package: Addressing CVE-2025-37803 and CVE-2025-38392
Summary
ALSA-2025:15429: Important: kernel security update. Affects kernel versions < 5.14.0-570.41.1.el9_6. Fixed in 5.14.0-570.41.1.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel package is a fundamental component of any Linux operating system, serving as the core interface between the computer's hardware and its processes. It manages system resources, facilitates communication between software and hardware, and ensures efficient operation of the system. This package is crucial for the stability and security of the operating system, making it vital to address any vulnerabilities that may arise.
Vulnerability Detail
The kernel vulnerability identified as CVE-2025-37803 involves a buffer size overflow issue during the creation of udmabuf, which could potentially allow an attacker to execute arbitrary code or crash the system. Additionally, CVE-2025-38392 pertains to the conversion of the control queue mutex to a spinlock in the idpf driver, which may lead to race conditions and system instability. Both vulnerabilities pose significant risks to system integrity and security.
How To Fix
Minimum fixed version
5.14.0-570.41.1.el9_6
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable the affected features or limit access to the kernel functionalities that utilize udmabuf until the update is applied. However, this is not a permanent solution and should be followed by an update as soon as possible.
Conclusion
In summary, the kernel package is critical for the operation of Linux systems, and the identified vulnerabilities CVE-2025-37803 and CVE-2025-38392 pose serious risks. It is crucial to update to the patched version 5.14.0-570.41.1.el9_6 to ensure system security and stability.
See every vulnerability recorded for kernel →
FAQ
CVE-2025-37803 is a vulnerability in the kernel that allows for a buffer size overflow during udmabuf creation, potentially leading to arbitrary code execution.
You can use Vulert, which monitors open-source vulnerabilities in real-time. By uploading your manifest file like package-lock.json, you can check if your application is affected.
Failure to address this vulnerability could result in system crashes, unauthorized access, or exploitation by malicious actors, compromising system integrity.
Yes, you can temporarily disable the features related to udmabuf or limit access to the kernel functionalities until the patch is applied.
Detailed information about the vulnerabilities can be found on the CVE pages for CVE-2025-37803 and CVE-2025-38392.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
