Read the docs
Red Hat Security Advisory

RHSA-2026:1886

kernel security update

Released 2026-02-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 8 records

Priority MEDIUM 48

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAX_SKB_FRAGS (17) fragments when handli…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00467 Published 2025-12-16 Partial fix · 5.10.247, 5.15.197 +6
Priority MEDIUM 42

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_Info::hostname may be updated once or many times during reconnect, so pr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00415 Published 2025-12-08 Partial fix · 6.1.28, 6.2.15 +2
Priority LOW 37

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_vc_config_que…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00158 Published 2025-10-15 Partial fix · 5.4.300, 5.10.245 +6
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: mac80211: fix potential double free on mesh join While commit 6a01afcf8468 ("mac80211: mesh: Free ie data when leaving mesh") fixed a memory leak on mes…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00259 Published 2025-02-26 Partial fix · 4.9.309, 4.14.274 +9 CWE-415
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE This data originates from userspace and is used in buffer offset calculations whi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00254 Published 2025-12-06 Partial fix · 5.4.302, 5.10.247 +6
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect() if already established During connect(), acting on a signal/timeout by disconnecting an already established so…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00168 Published 2025-12-04 Partial fix · 5.4.302, 5.10.247 +6
TI-2022-25824 CVE-2022-50341 · GHSA-frfp-g383-4xwm

cifs: fix oops during encryption

Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: cifs: fix oops during encryption When running xfstests against Azure the following oops occurred on an arm64 system Unable to handle kernel write to rea…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0011 Published 2025-09-16 Partial fix · 5.4.229, 5.10.163 +4
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an…

CVSS — EPSS 0.00211 Published 2025-11-12 Partial fix · 5.4.301, 5.10.246 +6