Read the docs
Red Hat Security Advisory

RHSA-2026:44385

kernel security, bug fix, and enhancement update

Released 2026-07-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 8 records

Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync This fixes the following UFA in hci_acl_create_conn_sync where a connection still pending is c…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00282 Published 2025-10-15 Partial fix · 6.1.155, 6.6.109 +3
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() drm_gem_fb_init_with_funcs() computes sub-sampled plane dimensions…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00142 Published 2026-05-28 Partial fix · 5.10.258, 5.15.209 +6 CWE-190
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete KASAN reproduces a slab-use-after-free in __xfrm_state_delete()'s hlist_del_rcu calls u…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0013 Published 2026-05-28 Partial fix · 5.10.261, 5.15.210 +6 CWE-416
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns STATUS_STOPPED_ON_SYMLINK, smb2_check_message() returns success without…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00387 Published 2026-04-24 Partial fix · 6.1, 6.1.175 +6 CWE-125
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 ("drm/amd/display: Add dsc pre-validation in ato…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0014 Published 2026-04-22 Partial fix · 6.1.175, 6.6.140 +4 CWE-416
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() When removing a resource from vmci_resource_table in vmci_resource_remove(), t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00276 Published 2024-09-18 Partial fix · 4.19.322, 5.4.284 +6 CWE-416
Priority LOW 30

In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in con_font_get() font.data may not initialize all memory spaces depending on the implementation of vc->vc_sw->con_font_get.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00606 Published 2024-10-29 Partial fix · 4.19.323, 5.4.285 +6 CWE-909
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: net: sched: act_csum: validate nested VLAN headers tcf_csum_act() walks nested VLAN headers directly from skb->data when an skb still carries in-payload…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00117 Published 2026-04-25 Partial fix · 4.20, 5.10.258 +7