Read the docs
Red Hat Security Advisory

RHSA-2026:2378

kernel-rt security update

Released 2026-02-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 8 records

Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec Commit efa56305908b ("nvmet-tcp: Fix a kernel panic when host sends an invalid H2C…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00778 Published 2026-01-25 Partial fix · 5.10.249, 5.15.199 +7 CWE-476
TI-2025-26840 CVE-2025-40170 · GHSA-3vr4-gx8q-4fgg

net: use dst_dev_rcu() in sk_setup_caps()

Priority LOW 39

In the Linux kernel, the following vulnerability has been resolved: net: use dst_dev_rcu() in sk_setup_caps() Use RCU to protect accesses to dst->dev from sk_setup_caps() and sk_dst_gso_max_size().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2025-11-12 Partial fix · 6.1.191, 6.6.160 +3
TI-2025-26828 CVE-2025-40158 · GHSA-4g43-pmw7-v27w

ipv6: use RCU in ip6_output()

Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_output() Use RCU in ip6_output() in order to use dst_dev_rcu() to prevent possible UAF.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00555 Published 2025-11-12 Partial fix · 6.1.191, 6.6.160 +3
TI-2025-26806 CVE-2025-40135 · GHSA-q28q-889g-6rx2

ipv6: use RCU in ip6_xmit()

Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0071 Published 2025-11-12 Partial fix · 5.15.224, 6.1.167 +4
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmci_transport_packet_init memset the vmci_transport_packet before populati…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00217 Published 2025-07-25 Partial fix · 5.4.296, 5.10.240 +6
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00712 Published 2025-12-24 Partial fix · 5.10.248, 5.15.198 +6
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio driver is transferred over USB URB packet buffers, and e…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2025-12-06 Partial fix · 4.4.230, 4.9.230 +11
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4_orphan_cleanup I caught a issue as follows: ================================================================== BUG: KAS…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00209 Published 2025-12-09 Partial fix · 4.19.270, 5.4.229 +5