Read the docs
Red Hat Security Advisory

RHSA-2026:2722

kernel security update

Released 2026-02-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 7 records

Priority MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset svc_rdma_copy_inline_range added rc_curpage (page index) to the page base instead of the byte offset rc_p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0053 Published 2026-01-13 Fixed in 6.12.64, 6.18.3 +1 CWE-787
Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec Commit efa56305908b ("nvmet-tcp: Fix a kernel panic when host sends an invalid H2C…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00778 Published 2026-01-25 Partial fix · 5.10.249, 5.15.199 +7 CWE-476
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00712 Published 2025-12-24 Partial fix · 5.10.248, 5.15.198 +6
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering te…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00144 Published 2025-12-08 Partial fix · 5.4.302, 5.10.247 +6
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in __pnet_find_base_ndev().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0015 Published 2025-10-28 Partial fix · 6.1.187, 6.6.156 +3
Priority LOW 31

In the Linux kernel, the following vulnerability has been resolved: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size.

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00294 Published 2025-04-16 Partial fix · 5.4.292, 5.10.236 +7 CWE-125
Priority LOW 30

In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_putcs* bit_putcs_aligned()/unaligned() derived the glyph pointer from the character value masked by 0xff/…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00143 Published 2025-12-08 Partial fix · 5.4.302, 5.10.247 +6