Red Hat Security Advisory

RHSA-2026:0747

kernel security update

Released 2026-01-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.54.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.54.1.el10_0, kernel-64k-devel-6.12.0-55.54.1.el10_0 +12
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.54.1.el10_0, kernel-64k-6.12.0-55.54.1.el10_0, kernel-64k-core-6.12.0-55.54.1.el10_0 +28
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.54.1.el10_0, libperf-6.12.0-55.54.1.el10_0
Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.54.1.el10_0, kernel-rt-64k-6.12.0-55.54.1.el10_0, kernel-rt-64k-core-6.12.0-55.54.1.el10_0 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.54.1.el10_0, kernel-rt-core-6.12.0-55.54.1.el10_0, kernel-rt-debug-6.12.0-55.54.1.el10_0 +11

Fixes 4 records

TI-2025-26846 CVE-2025-40176 · GHSA-79rw-jwgh-qv55

tls: wait for pending async decryptions if tls_strp_msg_hold fails

MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tls_strp_msg_hold fails Async decryption calls tls_strp_msg_hold to create a clone of the input skb to hold r…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00487 Published 2025-11-12 Fixed in 6.1.158, 6.6.114 +3

TI-2025-41861 CVE-2025-68285 · GHSA-v24j-9ghx-7rf2

libceph: fix potential use-after-free in have_mon_and_osd_map()

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_and_osd_map() The wait loop in __ceph_open_session() can race with the client receiving a new monmap o…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00585 Published 2025-12-16 Partial fix · 5.10.247, 5.15.197 +5

TI-2025-26812 CVE-2025-40141 · GHSA-rr62-6cpm-ww8h

Bluetooth: ISO: Fix possible UAF on iso_conn_free

LOW 37

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix possible UAF on iso_conn_free This attempt to fix similar issue to sco_conn_free where if the conn->sk is not set to NULL may lead t…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00324 Published 2025-11-12 Partial fix · 6.1.156, 6.6.112 +3

TI-2025-25217 CVE-2025-37869 · GHSA-59x3-j3qw-gjfx

drm/xe: Use local fence in error path of xe_migrate_clear

LOW 36

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent of the error path in xe_migrate_clear is to wait on locally generated fence and the…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00277 Published 2025-05-09 Partial fix · 6.12.25, 6.14.4 +1 CWE-416