Read the docs
Red Hat Security Advisory

RHSA-2026:2721

kernel security update

Released 2026-02-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 7 records

Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec Commit efa56305908b ("nvmet-tcp: Fix a kernel panic when host sends an invalid H2C…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00778 Published 2026-01-25 Partial fix · 5.10.249, 5.15.199 +7 CWE-476
Priority LOW 37

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix possible UAF on iso_conn_free This attempt to fix similar issue to sco_conn_free where if the conn->sk is not set to NULL may lead t…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00324 Published 2025-11-12 Partial fix · 6.1.156, 6.6.112 +3
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00712 Published 2025-12-24 Partial fix · 5.10.248, 5.15.198 +6
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio driver is transferred over USB URB packet buffers, and e…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2025-12-06 Partial fix · 4.4.230, 4.9.230 +11
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in __pnet_find_base_ndev().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0015 Published 2025-10-28 Partial fix · 6.1.187, 6.6.156 +3
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different type For multiple devices, both primary and extra devices should be the same type.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00178 Published 2025-07-03 Fixed in 6.12.34, 6.15.3 +1 CWE-416
Priority LOW 31

In the Linux kernel, the following vulnerability has been resolved: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size.

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00294 Published 2025-04-16 Partial fix · 5.4.292, 5.10.236 +7 CWE-125