Red Hat Security Advisory

RHSA-2026:1442

kernel security update

Released 2026-01-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.177.1.el8_6, kernel-4.18.0-372.177.1.el8_6, kernel-abi-stablelists-4.18.0-372.177.1.el8_6 +14
Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.177.1.el8_6, kernel-4.18.0-372.177.1.el8_6, kernel-abi-stablelists-4.18.0-372.177.1.el8_6 +19
Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.177.1.el8_6, kernel-4.18.0-372.177.1.el8_6, kernel-abi-stablelists-4.18.0-372.177.1.el8_6 +14

Fixes 5 records

TI-2023-29992 CVE-2023-53705 · GHSA-27mw-8p8v-6j5h

ipv6: Fix out-of-bounds access in ipv6_find_tlv()

MEDIUM 42

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv() optlen is fetched without checking whether there is more than one byte to parse.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00564 Published 2025-10-22 Partial fix · 4.14.316, 4.19.284 +6

TI-2022-24801 CVE-2022-49290 · GHSA-9368-p9r2-276c

mac80211: fix potential double free on mesh join

LOW 36

In the Linux kernel, the following vulnerability has been resolved: mac80211: fix potential double free on mesh join While commit 6a01afcf8468 ("mac80211: mesh: Free ie data when leaving mesh") fixed a memory leak on mes…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00259 Published 2025-02-26 Partial fix · 4.9.309, 4.14.274 +9 CWE-415

TI-2025-26947 CVE-2025-40277 · GHSA-6jjc-g279-fq4c

drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

LOW 34

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE This data originates from userspace and is used in buffer offset calculations whi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00254 Published 2025-12-06 Partial fix · 5.4.302, 5.10.247 +6

TI-2025-26918 CVE-2025-40248 · GHSA-j4rg-4m7w-4hr3

vsock: Ignore signal/timeout on connect() if already established

LOW 33

In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect() if already established During connect(), acting on a signal/timeout by disconnecting an already established so…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00168 Published 2025-12-04 Partial fix · 5.4.302, 5.10.247 +6

TI-2025-26665 CVE-2025-39993 · GHSA-2c3m-5h4x-9w2g

media: rc: fix races with imon_disconnect()

LOW 33

In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imon_disconnect() Syzbot reports a KASAN issue as below: BUG: KASAN: use-after-free in __create_pipe include/linux/usb.h:1945…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0016 Published 2025-10-15 Partial fix · 5.4.301, 5.10.246 +7