Red Hat Security AdvisoryRHSA-2026:0489
kernel security update
Released 2026-01-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.106.1.el9_4, libperf-5.14.0-427.106.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.106.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.106.1.el9_4, kernel-64k-devel-5.14.0-427.106.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.106.1.el9_4, kernel-5.14.0-427.106.1.el9_4, kernel-64k-5.14.0-427.106.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.106.1.el9_4, kernel-rt-core-5.14.0-427.106.1.el9_4, kernel-rt-debug-5.14.0-427.106.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.106.1.el9_4, kernel-rt-core-5.14.0-427.106.1.el9_4, kernel-rt-debug-5.14.0-427.106.1.el9_4 +11
Fixes 8 records
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tls_strp_msg_hold fails Async decryption calls tls_strp_msg_hold to create a clone of the input skb to hold r…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00487 · Published 2025-11-12 · Fixed in 6.1.158, 6.6.114 +3
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_and_osd_map() The wait loop in __ceph_open_session() can race with the client receiving a new monmap o…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00585 · Published 2025-12-16 · Partial fix · 5.10.247, 5.15.197 +5
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the retu…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00406 · Published 2025-09-04 · Partial fix · 5.4.297, 5.10.241 +7 CWE-416
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync This fixes the following UFA in hci_acl_create_conn_sync where a connection still pending is c…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00282 · Published 2025-10-15 · Partial fix · 6.1.155, 6.6.109 +3
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix possible UAF on iso_conn_free This attempt to fix similar issue to sco_conn_free where if the conn->sk is not set to NULL may lead t…
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00324 · Published 2025-11-12 · Partial fix · 6.1.156, 6.6.112 +3
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed transport in sendmsg sctp_sendmsg() re-uses associations and transports when possible by doing a lookup b…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00226 · Published 2025-05-01 · Partial fix · 3.19, 4.5 +12 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename request to the server, the rename process also involves closing any…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00118 · Published 2025-09-16 · Partial fix · 6.1.150, 6.6.104 +3 CWE-362
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths This patch addresses a race condition caused by unsynchronized execut…
CVSS — · EPSS 0.00232 · Published 2025-12-16 · Partial fix · 5.10.247, 5.15.197 +5
THREATIST.IORead the docs