Red Hat Security Advisory

RHSA-2026:0444

kernel security update

Released 2026-01-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.92.1.el8_10, kernel-4.18.0-553.92.1.el8_10, kernel-abi-stablelists-4.18.0-553.92.1.el8_10 +19
Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.92.1.el8_10

Fixes 3 records

TI-2025-41861 CVE-2025-68285 · GHSA-v24j-9ghx-7rf2

libceph: fix potential use-after-free in have_mon_and_osd_map()

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_and_osd_map() The wait loop in __ceph_open_session() can race with the client receiving a new monmap o…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00585 Published 2025-12-16 Partial fix · 5.10.247, 5.15.197 +5

TI-2025-26910 CVE-2025-40240 · GHSA-p7wh-phc3-g7xr

sctp: avoid NULL dereference when chunk data buffer is missing

LOW 34

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk->skb pointer is dereferenced in the if-block where it's supposed to be NULL only.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00644 Published 2025-12-04 Partial fix · 5.4.301, 5.10.246 +6

TI-2025-26665 CVE-2025-39993 · GHSA-2c3m-5h4x-9w2g

media: rc: fix races with imon_disconnect()

LOW 33

In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imon_disconnect() Syzbot reports a KASAN issue as below: BUG: KASAN: use-after-free in __create_pipe include/linux/usb.h:1945…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0016 Published 2025-10-15 Partial fix · 5.4.301, 5.10.246 +7