Update Advisory-EGI-SVG-2026-01.md

Author: Lindacornwall

2026/Advisory-EGI-SVG-2026-01.md

@@ -1,11 +1,101 @@
 ---
 title: Advisory-EGI-SVG-2026-01
 permalink: /Advisory-EGI-SVG-2026-01
+redirect_from:
+  - /Advisory-SVG-CVE-2025-38499
+  
+published: false
 
 ---
+## Advisory-EGI-SVG-2026-01
+
+# HIGH risk Linux Kernel vulnerability on RHEL-9/10 etc
+
+Date:        2026-01-06
+Updated:     2026-02-11
+
+
+HIGH risk vulnerability affecting RHEL-9, RHEL-10, derivatives
+and other distributions, concerning clone_private_mnt(). [R 1]
+
+
+## IDs AND CVSS SCORE      
+
+EGI SVG ID : EGI-SVG-2026-01
+    
+CVE ID     : CVE-2025-38499
+
+CVSS Score : 7.8 [R 1]
+    
+
+## ACTIONS REQUIRED/RECOMMENDED
+
+Affected sites are recommended to update relevant components 
+as soon as possible using information in the references below.
+    
+## MITIGATION
+
+No mitigation is available [R 1]
+
+## MORE INFORMATION
+
+Other security issues were fixed at the same time as this [R 8] [R 9].
+
+RHEL-8 and derivatives are not affected.
+    
+## STATUS OF THIS ADVISORY
+    
+                        
+_TLP:CLEAR information - Unlimited distribution_ 
+
+ 
+ https://advisories.egi.eu/Advisory-EGI-SVG-2026-01  
+ 
+ https://advisories.egi.eu/Advisory-SVG-CVE-2025-38499
+
+Minor updates may be made without re-distribution to the sites.
+
+
+## CONTACT AND OTHER INFORMATION ON SVG
+
+-----------------------------
+    This advisory is subject to the Creative Commons licence 
+    https://creativecommons.org/licenses/by/4.0/ and
+    the EGI (https://www.egi.eu/) Software Vulnerability Group 
+    must be credited.
+---
+
+Comments or questions should be sent to
+	svg-rat at mailman.egi.eu
+
+Vulnerabilities relevant for EGI can be reported at
+	report-vulnerability at egi.eu
+    
+(see [R 99] for further details, and other information on SVG)
+    
+    
+## REFERENCES
+
+- [R 1] <https://access.redhat.com/security/cve/CVE-2025-38499>
+
+- [R 2] <https://nvd.nist.gov/vuln/detail/CVE-2025-38499> 
+     
+- [R 3] <https://www.cve.org/CVERecord?id=CVE-2025-38499>
+
+- [R 4] <https://security-tracker.debian.org/tracker/CVE-2025-38499> 
+    
+- [R 5] <https://ubuntu.com/security/CVE-2025-38499>
+
+- [R 6] <https://errata.build.resf.org/>   (RockyLinux)
+
+- [R 7] <https://errata.almalinux.org/>  (AlmaLinux)
+
+- [R 8] <https://access.redhat.com/errata/RHSA-2025:23241> (RHEL9)
 
-**Advisory EGI-SVG-2026-01 is not public yet**
+- [R 9] <https://access.redhat.com/errata/RHSA-2025:23279> (RHEL10)
+    
+- [R 99] <https://confluence.egi.eu/display/EGIBG/SVG+Advisories>
 
-When it is it will be here.
+## CREDITS
 
-You are looking in the right place
+SVG was alerted to this vulnerability by Mischa Salle.