Red Hat Security Advisory

RHSA-2026:2594

kernel security update

Released 2026-02-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.110.1.el9_4, libperf-5.14.0-427.110.1.el9_4
Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.110.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.110.1.el9_4, kernel-64k-devel-5.14.0-427.110.1.el9_4 +11
Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.110.1.el9_4, kernel-5.14.0-427.110.1.el9_4, kernel-64k-5.14.0-427.110.1.el9_4 +29
Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.110.1.el9_4, kernel-rt-core-5.14.0-427.110.1.el9_4, kernel-rt-debug-5.14.0-427.110.1.el9_4 +9
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.110.1.el9_4, kernel-rt-core-5.14.0-427.110.1.el9_4, kernel-rt-debug-5.14.0-427.110.1.el9_4 +11

Fixes 4 records

TI-2025-25905 CVE-2025-38568 · GHSA-4rpm-cvm4-wfmq

net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing

LOW 35

In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing TCA_MQPRIO_TC_ENTRY_INDEX is validated using NLA_POLICY_MAX(NLA_U32, TC_QOPT_MAX_QU…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00176 Published 2025-08-19 Partial fix · 6.6.102, 6.12.42 +3 CWE-787

TI-2025-25367 CVE-2025-38022 · GHSA-m3m6-56v9-2jm6

RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem

LOW 35

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x11…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00199 Published 2025-06-18 Partial fix · 5.10.248, 5.5 +6 CWE-416

TI-2025-26992 CVE-2025-40322 · GHSA-hcc6-6437-vwm2

fbdev: bitblit: bound-check glyph index in bit_putcs*

LOW 30

In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_putcs* bit_putcs_aligned()/unaligned() derived the glyph pointer from the character value masked by 0xff/…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00143 Published 2025-12-08 Partial fix · 5.4.302, 5.10.247 +6

TI-2025-26964 CVE-2025-40294 · GHSA-23g6-rffg-7f3p

Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()

LOW 22

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() In the parse_adv_monitor_pattern() function, the value of the 'length' variable is curren…

CVSS — EPSS 0.00201 Published 2025-12-08 Partial fix · 6.1.159, 6.6.117 +3