Red Hat Security Advisory

RHSA-2026:1142

kernel security update

Released 2026-01-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.97.1.el8_10, kernel-4.18.0-553.97.1.el8_10, kernel-abi-stablelists-4.18.0-553.97.1.el8_10 +19
Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.97.1.el8_10

Fixes 4 records

TI-2023-29961 CVE-2023-53673 · GHSA-7v48-2x62-5ff3

Bluetooth: hci_event: call disconnect callback before deleting conn

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: call disconnect callback before deleting conn In hci_cs_disconnect, we do hci_conn_del even if disconnection failed.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0025 Published 2025-10-07 Partial fix · 5.15.200, 6.1.42 +2 CWE-416

TI-2025-26947 CVE-2025-40277 · GHSA-6jjc-g279-fq4c

drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

LOW 34

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE This data originates from userspace and is used in buffer offset calculations whi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00254 Published 2025-12-06 Partial fix · 5.4.302, 5.10.247 +6

TI-2025-26918 CVE-2025-40248 · GHSA-j4rg-4m7w-4hr3

vsock: Ignore signal/timeout on connect() if already established

LOW 33

In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect() if already established During connect(), acting on a signal/timeout by disconnecting an already established so…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00168 Published 2025-12-04 Partial fix · 5.4.302, 5.10.247 +6

TI-2025-26824 CVE-2025-40154 · GHSA-8q99-hhgh-7gww

ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping

LOW 24

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an…

CVSS — EPSS 0.00211 Published 2025-11-12 Partial fix · 5.4.301, 5.10.246 +6