Red Hat Security AdvisoryRHSA-2026:2282
kernel security update
Released 2026-02-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-124.35.1.el10_1, kernel-64k-debug-devel-matched-6.12.0-124.35.1.el10_1, kernel-64k-devel-6.12.0-124.35.1.el10_1 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-124.35.1.el10_1, kernel-64k-6.12.0-124.35.1.el10_1, kernel-64k-core-6.12.0-124.35.1.el10_1 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-124.35.1.el10_1, libperf-6.12.0-124.35.1.el10_1
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-124.35.1.el10_1, kernel-rt-64k-6.12.0-124.35.1.el10_1, kernel-rt-64k-core-6.12.0-124.35.1.el10_1 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-124.35.1.el10_1, kernel-rt-core-6.12.0-124.35.1.el10_1, kernel-rt-debug-6.12.0-124.35.1.el10_1 +9
Fixes 8 records
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset svc_rdma_copy_inline_range added rc_curpage (page index) to the page base instead of the byte offset rc_p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0053 · Published 2026-01-13 · Fixed in 6.12.64, 6.18.3 +1 CWE-787
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_length This is inspired by the related server fixes.
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.00347 · Published 2025-10-04 · Partial fix · 6.1.191, 6.6.160 +3
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable().
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00514 · Published 2025-11-12 · Fixed in 6.12.55, 6.17.3 +1
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers on retry Ring provided buffers are potentially only valid within the single execution context in which they were ac…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00173 · Published 2025-09-04 · Partial fix · 6.6.103, 6.12.44 +3 CWE-787
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmci_transport_packet_init memset the vmci_transport_packet before populati…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00217 · Published 2025-07-25 · Partial fix · 5.4.296, 5.10.240 +6
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering te…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00144 · Published 2025-12-08 · Partial fix · 5.4.302, 5.10.247 +6
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an "UBSAN: shift-out-of-bounds in squashfs_bio_read" bug.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2025-07-25 · Partial fix · 5.4.295, 5.10.239 +6 CWE-787
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_putcs* bit_putcs_aligned()/unaligned() derived the glyph pointer from the character value masked by 0xff/…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00143 · Published 2025-12-08 · Partial fix · 5.4.302, 5.10.247 +6
THREATIST.IORead the docs