Red Hat Security Advisory

RHSA-2026:65709

kernel security update

Released 2026-09-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.166.1.el8_8, kernel-4.18.0-477.166.1.el8_8, kernel-abi-stablelists-4.18.0-477.166.1.el8_8 +14
Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.166.1.el8_8, kernel-4.18.0-477.166.1.el8_8, kernel-abi-stablelists-4.18.0-477.166.1.el8_8 +14

Fixes 3 records

TI-2026-33780 CVE-2026-46056 · GHSA-v6c2-56h6-9pgq

Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00282 Published 2026-05-27 Partial fix · 5.10.259, 5.15.210 +6 CWE-416

TI-2026-45755 CVE-2026-64191 · GHSA-cc9h-5xhh-h7j7

i2c: stub: Reject I2C block transfers with invalid length

LOW 35

In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2C_SMBUS_I2C_BLOCK_DATA case in stub_xfer() uses data->block[0] as the transfer length.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2026-07-20 Partial fix · 5.10.260, 5.15.211 +6 CWE-787

TI-2026-38282 CVE-2026-53196 · GHSA-f3q5-7m6p-4qxq

USB: serial: io_ti: fix heap overflow in get_manuf_info()

LOW 30

In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads le16_to_cpu(rom_desc->Size) bytes from the device I2C EEPROM into a buf…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00271 Published 2026-06-25 Partial fix · 5.10.259, 5.15.210 +6 CWE-787