In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table used in another process in which unrelated VMAs can afterwards be installed. If this happens in the middle of a concurrent gup_fast(), gup_fast() could end up walking the page tables of another process. While I don't see any way in which that immediately leads to kernel memory corruption, it is really weird and unexpected. Fix it with an explicit broadcast IPI through tlb_remove_table_sync_one(), just like we do in khugepaged when removing page tables for a THP collapse.

alma_linux ALSA-2025:13590: ALSA-2025:13590: kernel-rt security update (Medium)

alma_linux ALSA-2025:13589: ALSA-2025:13589: kernel security update (Medium)

oracle_linux ELSA-2025-13589: ELSA-2025-13589:  kernel security update (MODERATE)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:13590 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    * kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    * kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

    * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    * kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    * kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

    * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)

    * kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:13589 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    * kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    * kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

    * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    * kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

    * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    * kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

    * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)

    * kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table     that may have previously been shared across processes, potentially turning it into a normal page table     used in another process in which unrelated VMAs can afterwards be installed. If this happens in the middle     of a concurrent gup_fast(), gup_fast() could end up walking the page tables of another process. While I     don't see any way in which that immediately leads to kernel memory corruption, it is really weird and     unexpected. Fix it with an explicit broadcast IPI through tlb_remove_table_sync_one(), just like we do in     khugepaged when removing page tables for a THP collapse. (CVE-2025-38085)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Severity
248468	RHEL 8 : kernel-rt (RHSA-2025:13590)	Nessus	Red Hat Local Security Checks	high
248467	RHEL 8 : kernel (RHSA-2025:13589)	Nessus	Red Hat Local Security Checks	high
247832	RHEL 10 : kernel (RHSA-2025:13598)	Nessus	Red Hat Local Security Checks	high
247656	Linux Distros Unpatched Vulnerability : CVE-2025-38085	Nessus	Misc.	medium
242163	Photon OS 5.0: Linux PHSA-2025-5.0-0558	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2025-38085

high

Tenable Plugins

Coming Soon

high

high

high

medium

high