Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 | kernel-rt | 0:3.10.0-1160.146.1.rt56.1298.el7 |
| Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 | kernel-rt-debug | 0:3.10.0-1160.146.1.rt56.1298.el7 |
| Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 | kernel-rt-debug-debuginfo | 0:3.10.0-1160.146.1.rt56.1298.el7 |
| Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 | kernel-rt-debug-devel | 0:3.10.0-1160.146.1.rt56.1298.el7 |
| Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 | kernel-rt-debuginfo | 0:3.10.0-1160.146.1.rt56.1298.el7 |
| Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 | kernel-rt-debuginfo-common-x86_64 | 0:3.10.0-1160.146.1.rt56.1298.el7 |
| Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 | kernel-rt-devel | 0:3.10.0-1160.146.1.rt56.1298.el7 |
| Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 | kernel-rt-doc | 0:3.10.0-1160.146.1.rt56.1298.el7 |
| Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 | kernel-rt-trace | 0:3.10.0-1160.146.1.rt56.1298.el7 |
| Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 | kernel-rt-trace-debuginfo | 0:3.10.0-1160.146.1.rt56.1298.el7 |
| Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 | kernel-rt-trace-devel | 0:3.10.0-1160.146.1.rt56.1298.el7 |
Vulnerabilities 4
-
High 8.8
i40e: fix idx validation in config queues msg
In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_vc_config_queues_msg().
-
High 8.8
i40e: add validation for ring_len param
In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory context (HMC) without any validation. To add…
-
High 7.8
vsock: Ignore signal/timeout on connect() if already established
In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect() if already established During connect(), acting on a signal/timeout by disconnecting an already established socket leads to several issues: 1. connec…
-
Unscored —CVE-2025-39898 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2400598
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2404108
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2418872
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1623.json
-
report
https://access.redhat.com/security/cve/CVE-2025-39898
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-39898
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-39898
-
article
https://lore.kernel.org/linux-cve-announce/2025100116-CVE-2025-39898-d844@gregkh/T
-
report
https://access.redhat.com/security/cve/CVE-2025-39971
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-39971
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-39971
-
article
https://lore.kernel.org/linux-cve-announce/2025101556-CVE-2025-39971-97e2@gregkh/T
-
report
https://access.redhat.com/security/cve/CVE-2025-39973
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2404116
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-39973
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-39973
-
article
https://lore.kernel.org/linux-cve-announce/2025101557-CVE-2025-39973-b1a3@gregkh/T
-
report
https://access.redhat.com/security/cve/CVE-2025-40248
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-40248
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-40248
-
article
https://lore.kernel.org/linux-cve-announce/2025120430-CVE-2025-40248-506e@gregkh/T