Red Hat Security Advisory

RHSA-2026:6193

kernel security update

Released 2026-03-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.65.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.65.1.el10_0, kernel-64k-devel-6.12.0-55.65.1.el10_0 +12
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.65.1.el10_0, kernel-64k-6.12.0-55.65.1.el10_0, kernel-64k-core-6.12.0-55.65.1.el10_0 +28
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.65.1.el10_0, libperf-6.12.0-55.65.1.el10_0
Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.65.1.el10_0, kernel-rt-64k-6.12.0-55.65.1.el10_0, kernel-rt-64k-core-6.12.0-55.65.1.el10_0 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.65.1.el10_0, kernel-rt-core-6.12.0-55.65.1.el10_0, kernel-rt-debug-6.12.0-55.65.1.el10_0 +11

Fixes 6 records

TI-2025-25197 CVE-2025-37849 · GHSA-4wfv-x2vf-68j5

KVM: arm64: Tear down vGIC on failed vCPU creation

LOW 38

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we propagate the error ba…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00273 Published 2025-05-09 Partial fix · 6.1.135, 6.6.88 +4 CWE-416

TI-2025-25587 CVE-2025-38248 · GHSA-2838-84rj-32xc

bridge: mcast: Fix use-after-free during router port configuration

LOW 36

In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a global list of ports behind which a multicast router resides.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.003 Published 2025-07-09 Partial fix · 5.15.224, 6.1.191 +4 CWE-416

TI-2025-25482 CVE-2025-38141 · GHSA-r6wx-gh72-c6q5

dm: fix dm_blk_report_zones

LOW 35

In the Linux kernel, the following vulnerability has been resolved: dm: fix dm_blk_report_zones If dm_get_live_table() returned NULL, dm_put_live_table() was never called.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00197 Published 2025-07-03 Partial fix · 6.12.34, 6.15.3 +1 CWE-416

TI-2025-41925 CVE-2025-68349 · GHSA-pchw-pcf7-8p47

NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid

LOW 34

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00712 Published 2025-12-24 Partial fix · 5.10.248, 5.15.198 +6

TI-2025-43235 CVE-2025-71085 · GHSA-hjpx-f2r6-rr4q

ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()

LOW 33

In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00305 Published 2026-01-13 Partial fix · 5.10.248, 5.15.198 +5 CWE-190

TI-2025-26768 CVE-2025-40096 · GHSA-xpm8-g6rj-74pw

drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

LOW 33

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies When adding dependencies with drm_sched_job_add_dependency(), that function…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00154 Published 2025-10-30 Partial fix · 6.1.158, 6.6.114 +3