Red Hat Security AdvisoryRHSA-2026:4012
kernel security update
Released 2026-03-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-124.43.1.el10_1, kernel-64k-debug-devel-matched-6.12.0-124.43.1.el10_1, kernel-64k-devel-6.12.0-124.43.1.el10_1 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-124.43.1.el10_1, kernel-64k-6.12.0-124.43.1.el10_1, kernel-64k-core-6.12.0-124.43.1.el10_1 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-124.43.1.el10_1, libperf-6.12.0-124.43.1.el10_1
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-124.43.1.el10_1, kernel-rt-64k-6.12.0-124.43.1.el10_1, kernel-rt-64k-core-6.12.0-124.43.1.el10_1 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-124.43.1.el10_1, kernel-rt-core-6.12.0-124.43.1.el10_1, kernel-rt-debug-6.12.0-124.43.1.el10_1 +9
Fixes 10 records
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlan_forward_source() Add RCU protection on (struct macvlan_source_entry)->vlan.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00206 · Published 2026-01-25 · Partial fix · 5.10.249, 5.15.199 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save Improper use of secondary pointer (&dev->i2c_subip_regs) caused kernel…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00147 · Published 2025-09-16 · Fixed in 6.16.5, 6.17 CWE-787
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: dm: fix dm_blk_report_zones If dm_get_live_table() returned NULL, dm_put_live_table() was never called.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00197 · Published 2025-07-03 · Partial fix · 6.12.34, 6.15.3 +1 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() syzbot reports: BUG: KASAN: slab-use-after-free in getrusage+0x1109/0x1a60 Read o…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00196 · Published 2025-07-03 · Partial fix · 6.12.34, 6.15.3 +1 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivar_entry_get() efivar_entry_get() always returns success even if the underlying __efivar_entry_get() fails, maski…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00141 · Published 2026-02-14 · Fixed in 6.1.162, 6.6.123 +3
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00305 · Published 2026-01-13 · Partial fix · 5.10.248, 5.15.198 +5 CWE-190
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: make sure the cdev fd is still active before emitting events With the final call to fput() on a file descriptor, the release action may be d…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00155 · Published 2025-12-04 · Fixed in 6.17.10, 6.18
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00176 · Published 2025-09-04 · Partial fix · 6.12.43, 6.15.11 +2 CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint companion parsing usb_parse_ss_endpoint_companion() checks descriptor type before length, enabling a…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00179 · Published 2025-09-11 · Partial fix · 5.10.241, 5.15.190 +6 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock (analyzed by Lance Yang): 1) Task (5749): Holds folio_lock, then trie…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00107 · Published 2026-02-04 · Partial fix · 5.10, 5.10.249 +6 CWE-362
THREATIST.IORead the docs