Red Hat Security AdvisoryRHSA-2026:0457
kernel security update
Released 2026-01-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.77.1.el9_6, libperf-5.14.0-570.77.1.el9_6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.77.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.77.1.el9_6, kernel-64k-devel-5.14.0-570.77.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.77.1.el9_6, kernel-64k-5.14.0-570.77.1.el9_6, kernel-64k-core-5.14.0-570.77.1.el9_6 +28
- Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.77.1.el9_6, kernel-rt-64k-5.14.0-570.77.1.el9_6, kernel-rt-64k-core-5.14.0-570.77.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.77.1.el9_6, kernel-rt-core-5.14.0-570.77.1.el9_6, kernel-rt-debug-5.14.0-570.77.1.el9_6 +11
Fixes 6 records
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tls_strp_msg_hold fails Async decryption calls tls_strp_msg_hold to create a clone of the input skb to hold r…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00487 · Published 2025-11-12 · Fixed in 6.1.158, 6.6.114 +3
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue This fixes the following UAF caused by not properly locking hdev when processing HCI_EV_NUM_COMP_PK…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00249 · Published 2025-10-15 · Partial fix · 6.16.10, 6.17
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A malicious HID device can trigger a slab out-of-bounds during mt_report_fixup() by…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00238 · Published 2025-09-16 · Partial fix · 5.15.191, 6.1.150 +5 CWE-125
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to fix possible UAFs caused by struct mgmt_pending being freed while still being processed like in the f…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00153 · Published 2025-10-15 · Partial fix · 6.6.140, 6.12.59 +2
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed transport in sendmsg sctp_sendmsg() re-uses associations and transports when possible by doing a lookup b…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00226 · Published 2025-05-01 · Partial fix · 3.19, 4.5 +12 CWE-416
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths This patch addresses a race condition caused by unsynchronized execut…
CVSS — · EPSS 0.00232 · Published 2025-12-16 · Partial fix · 5.10.247, 5.15.197 +5
THREATIST.IORead the docs