Red Hat Security AdvisoryRHSA-2026:0173
kernel security update
Released 2026-01-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.104.1.el9_4, libperf-5.14.0-427.104.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.104.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.104.1.el9_4, kernel-64k-devel-5.14.0-427.104.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.104.1.el9_4, kernel-5.14.0-427.104.1.el9_4, kernel-64k-5.14.0-427.104.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.104.1.el9_4, kernel-rt-core-5.14.0-427.104.1.el9_4, kernel-rt-debug-5.14.0-427.104.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.104.1.el9_4, kernel-rt-core-5.14.0-427.104.1.el9_4, kernel-rt-debug-5.14.0-427.104.1.el9_4 +11
Fixes 5 records
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory conte…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00158 · Published 2025-10-15 · Partial fix · 5.4.300, 5.10.245 +6
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_vc_config_que…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00158 · Published 2025-10-15 · Partial fix · 5.4.300, 5.10.245 +6
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_write() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00238 · Published 2024-05-19 · Partial fix · 3.13, 6.1.85 +3 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix connection failure handling In case immediate MPA request processing fails, the newly created endpoint unlinks the listening endpoint and…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00661 · Published 2024-03-02 · Fixed in 5.4.258, 5.10.198 +4 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: can: j1939: implement NETDEV_UNREGISTER notification handler syzbot is reporting unregister_netdevice: waiting for vcan0 to become free.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0015 · Published 2025-10-01 · Partial fix · 5.15.220, 6.1.187 +4
THREATIST.IORead the docs