Red Hat Security Advisory

RHSA-2026:1909

kernel security update

Released 2026-02-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.155.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.155.1.el9_2, kernel-64k-devel-5.14.0-284.155.1.el9_2 +10
Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.155.1.el9_2, kernel-5.14.0-284.155.1.el9_2, kernel-64k-5.14.0-284.155.1.el9_2 +29

Fixes 4 records

TI-2025-41877 CVE-2025-68301 · GHSA-xx64-5wwx-9g36

net: atlantic: fix fragment overflow handling in RX path

MEDIUM 48

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAX_SKB_FRAGS (17) fragments when handli…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00467 Published 2025-12-16 Partial fix · 5.10.247, 5.15.197 +6

TI-2023-30037 CVE-2023-53751 · GHSA-7gp2-6wc7-fw9f

cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname

MEDIUM 42

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_Info::hostname may be updated once or many times during reconnect, so pr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00415 Published 2025-12-08 Partial fix · 6.1.28, 6.2.15 +2

TI-2025-26918 CVE-2025-40248 · GHSA-j4rg-4m7w-4hr3

vsock: Ignore signal/timeout on connect() if already established

LOW 33

In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect() if already established During connect(), acting on a signal/timeout by disconnecting an already established so…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00168 Published 2025-12-04 Partial fix · 5.4.302, 5.10.247 +6

TI-2022-26319 CVE-2022-50865 · GHSA-2qmc-x97c-8pmc

tcp: fix a signed-integer-overflow bug in tcp_add_backlog()

LOW 33

In the Linux kernel, the following vulnerability has been resolved: tcp: fix a signed-integer-overflow bug in tcp_add_backlog() The type of sk_rcvbuf and sk_sndbuf in struct sock is int, and in tcp_add_backlog(), the var…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00528 Published 2025-12-30 Partial fix · 5.4.278, 5.10.153 +3