Red Hat Security Advisory

RHSA-2026:1581

kernel security update

Released 2026-01-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) bpftool-3.10.0-1160.146.1.el7, kernel-3.10.0-1160.146.1.el7, kernel-abi-whitelists-3.10.0-1160.146.1.el7 +11
Red Hat Enterprise Linux Server Optional (v. 7 ELS) kernel-debug-devel-3.10.0-1160.146.1.el7, kernel-tools-libs-devel-3.10.0-1160.146.1.el7

Fixes 3 records

TI-2025-26645 CVE-2025-39973 · GHSA-j9g6-49hr-w92p

i40e: add validation for ring_len param

LOW 39

In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory conte…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00158 Published 2025-10-15 Partial fix · 5.4.300, 5.10.245 +6

TI-2025-26643 CVE-2025-39971 · GHSA-h9cj-j3jc-97wc

i40e: fix idx validation in config queues msg

LOW 37

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_vc_config_que…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00158 Published 2025-10-15 Partial fix · 5.4.300, 5.10.245 +6

TI-2025-26918 CVE-2025-40248 · GHSA-j4rg-4m7w-4hr3

vsock: Ignore signal/timeout on connect() if already established

LOW 33

In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect() if already established During connect(), acting on a signal/timeout by disconnecting an already established so…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00168 Published 2025-12-04 Partial fix · 5.4.302, 5.10.247 +6