[LU-19290] kernel update [RHEL 9.6 5.14.0-570.37.1.el9_6]

• Type: Task
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.17.0
• Affects Version/s: Lustre 2.17.0, Lustre 2.15.7
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

Security Fix(es) for kernel 5.14.0-570.35.1.el9_6:

• kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (CVE-2025-21867)
• microcode_ctl: From CVEorg collector (CVE-2024-28956)
• kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084)
• kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)
• kernel: net: fix udp gso skb_segment after pull from frag_list (CVE-2025-38124)
• kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)
• kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250)
• kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380)
• kernel: tls: always refresh the queue when reading sock (CVE-2025-38471)

https://access.redhat.com/errata/product/479/ver=/rhel---9/x86_64/RHSA-2025:13962

Security Fix(es) for kernel 5.14.0-570.37.1.el9_6:

• kernel: udp: Fix memory accounting leak. (CVE-2025-22058)
• kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914)
• kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417)

https://access.redhat.com/errata/product/479/ver=/rhel---9/x86_64/RHSA-2025:14420

Issue Links

• is related to: LU-19171 kernel update [RHEL 9.6 5.14.0-570.30.1.el9_6]