ALSA-2025:23241

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499)
• kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)
• kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.