Red Hat Security AdvisoryRHSA-2026:0445
kernel security update
Released 2026-01-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-611.20.1.el9_7, kernel-64k-debug-devel-matched-5.14.0-611.20.1.el9_7, kernel-64k-devel-5.14.0-611.20.1.el9_7 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-611.20.1.el9_7, kernel-64k-5.14.0-611.20.1.el9_7, kernel-64k-core-5.14.0-611.20.1.el9_7 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-611.20.1.el9_7, libperf-5.14.0-611.20.1.el9_7
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-611.20.1.el9_7, kernel-rt-64k-5.14.0-611.20.1.el9_7, kernel-rt-64k-core-5.14.0-611.20.1.el9_7 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-611.20.1.el9_7, kernel-rt-core-5.14.0-611.20.1.el9_7, kernel-rt-debug-5.14.0-611.20.1.el9_7 +9
Fixes 4 records
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A malicious HID device can trigger a slab out-of-bounds during mt_report_fixup() by…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00238 · Published 2025-09-16 · Partial fix · 5.15.191, 6.1.150 +5 CWE-125
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk->skb pointer is dereferenced in the if-block where it's supposed to be NULL only.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00644 · Published 2025-12-04 · Partial fix · 5.4.301, 5.10.246 +6
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory When I did memory failure tests, below panic occurs: page dumped because:…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00157 · Published 2025-09-23 · Partial fix · 5.4.300, 5.10.245 +6 CWE-125
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: audit: fix out-of-bounds read in audit_compare_dname_path() When a watch on dir=/ is combined with an fsnotify event for a single-character name directl…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00154 · Published 2025-09-19 · Fixed in 6.16.6, 6.17 CWE-125