Red Hat Security AdvisoryRHSA-2026:0271
kernel security update
Released 2026-01-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.52.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.52.1.el10_0, kernel-64k-devel-6.12.0-55.52.1.el10_0 +8
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.52.1.el10_0, kernel-64k-6.12.0-55.52.1.el10_0, kernel-64k-core-6.12.0-55.52.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.52.1.el10_0
- Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.52.1.el10_0, kernel-rt-64k-6.12.0-55.52.1.el10_0, kernel-rt-64k-core-6.12.0-55.52.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.52.1.el10_0, kernel-rt-core-6.12.0-55.52.1.el10_0, kernel-rt-debug-6.12.0-55.52.1.el10_0 +11
Fixes 8 records
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync This fixes the following UFA in hci_acl_create_conn_sync where a connection still pending is c…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00282 · Published 2025-10-15 · Partial fix · 6.1.155, 6.6.109 +3
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue This fixes the following UAF caused by not properly locking hdev when processing HCI_EV_NUM_COMP_PK…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00249 · Published 2025-10-15 · Partial fix · 6.16.10, 6.17
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A malicious HID device can trigger a slab out-of-bounds during mt_report_fixup() by…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00238 · Published 2025-09-16 · Partial fix · 5.15.191, 6.1.150 +5 CWE-125
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to fix possible UAFs caused by struct mgmt_pending being freed while still being processed like in the f…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00153 · Published 2025-10-15 · Partial fix · 6.6.140, 6.12.59 +2
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory When I did memory failure tests, below panic occurs: page dumped because:…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00157 · Published 2025-09-23 · Partial fix · 5.4.300, 5.10.245 +6 CWE-125
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a user…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2025-09-11 · Partial fix · 3.17, 4.5 +7
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: can: j1939: implement NETDEV_UNREGISTER notification handler syzbot is reporting unregister_netdevice: waiting for vcan0 to become free.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0015 · Published 2025-10-01 · Partial fix · 5.15.220, 6.1.187 +4
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: mm: slub: avoid wake up kswapd in set_track_prepare set_track_prepare() can incur lock recursion.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00117 · Published 2025-09-19 · Partial fix · 6.1.151, 6.6.105 +3 CWE-667
THREATIST.IORead the docs