Red Hat Security AdvisoryRHSA-2026:0793
kernel security update
Released 2026-01-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-611.24.1.el9_7, kernel-64k-debug-devel-matched-5.14.0-611.24.1.el9_7, kernel-64k-devel-5.14.0-611.24.1.el9_7 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-611.24.1.el9_7, kernel-64k-5.14.0-611.24.1.el9_7, kernel-64k-core-5.14.0-611.24.1.el9_7 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-611.24.1.el9_7, libperf-5.14.0-611.24.1.el9_7
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-611.24.1.el9_7, kernel-rt-64k-5.14.0-611.24.1.el9_7, kernel-rt-64k-core-5.14.0-611.24.1.el9_7 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-611.24.1.el9_7, kernel-rt-core-5.14.0-611.24.1.el9_7, kernel-rt-debug-5.14.0-611.24.1.el9_7 +9
Fixes 5 records
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_and_osd_map() The wait loop in __ceph_open_session() can race with the client receiving a new monmap o…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00585 · Published 2025-12-16 · Partial fix · 5.10.247, 5.15.197 +5
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_length This is inspired by the related server fixes.
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.00347 · Published 2025-10-04 · Partial fix · 6.1.191, 6.6.160 +3
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE This data originates from userspace and is used in buffer offset calculations whi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00254 · Published 2025-12-06 · Partial fix · 5.4.302, 5.10.247 +6
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00176 · Published 2025-09-04 · Partial fix · 6.12.43, 6.15.11 +2 CWE-416
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths This patch addresses a race condition caused by unsynchronized execut…
CVSS — · EPSS 0.00232 · Published 2025-12-16 · Partial fix · 5.10.247, 5.15.197 +5
THREATIST.IORead the docs