Skip to content
OpenAdvisories
Critical RHSA-2026:2664 10 CVEs

Red Hat Security Advisory: kernel security update

Published Feb 13, 2026 · Updated Aug 22, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bpftool 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bpftool-debuginfo 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-abi-whitelists 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-core 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-debug 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-debug-core 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-debug-debuginfo 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-debug-devel 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-debug-modules 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-debug-modules-extra 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-debuginfo 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-debuginfo-common-x86_64 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-devel 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-doc 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-modules 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-modules-extra 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-tools 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-tools-debuginfo 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos kernel-tools-libs 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos perf 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos perf-debuginfo 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos python3-perf 0:4.18.0-193.185.1.el8_2
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos python3-perf-debuginfo 0:4.18.0-193.185.1.el8_2

Vulnerabilities 10

  • Critical 9.8
    CVE-2025-68301

    net: atlantic: fix fragment overflow handling in RX path

    In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAX_SKB_FRAGS (17) fragments when handling large multi-descriptor packets. This…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2022-50341

    cifs: fix oops during encryption

    In the Linux kernel, the following vulnerability has been resolved: cifs: fix oops during encryption When running xfstests against Azure the following oops occurred on an arm64 system Unable to handle kernel write to read-only memory at virtual address ffff00…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2022-50673

    ext4: fix use-after-free in ext4_orphan_cleanup

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4_orphan_cleanup I caught a issue as follows: ================================================================== BUG: KASAN: use-after-free in __list_add_valid+…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-53539

    RDMA/rxe: Fix incomplete state save in rxe_requester

    In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix incomplete state save in rxe_requester If a send packet is dropped by the IP layer in rxe_requester() the call to rxe_xmit_packet() can fail with err == -EAGAIN. To recover, the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-40304

    fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds

    In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering text near screen edges. Return early if t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2025-68349

    NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid

    In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4_write_inode -> pnfs_layoutcommit_inode…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2025-40322

    fbdev: bitblit: bound-check glyph index in bit_putcs*

    In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_putcs* bit_putcs_aligned()/unaligned() derived the glyph pointer from the character value masked by 0xff/0x1ff, which may exceed the actual font…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53581

    net/mlx5e: Check for NOT_READY flag state after locking

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Check for NOT_READY flag state after locking Currently the check for NOT_READY flag is performed before obtaining the necessary lock. This opens a possibility for race condition wh…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-53833

    drm/i915: Fix NULL ptr deref by checking new_crtc_state

    In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix NULL ptr deref by checking new_crtc_state intel_atomic_get_new_crtc_state can return NULL, unless crtc state wasn't obtained previously with intel_atomic_get_crtc_state, so we m…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40154

    ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping

    In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an error message but leaves as is. This m…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2395879
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2401510
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2401545
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2414494
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2419870
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2419902
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2420347
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2420366
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2422836
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2424880
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2664.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-50341
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50341
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50341
  • article
    https://lore.kernel.org/linux-cve-announce/2025091638-CVE-2022-50341-12c1@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2022-50673
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50673
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50673
  • article
    https://lore.kernel.org/linux-cve-announce/2025120947-CVE-2022-50673-f920@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-53539
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-53539
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-53539
  • article
    https://lore.kernel.org/linux-cve-announce/2025100443-CVE-2023-53539-4411@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-53581
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-53581
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-53581
  • article
    https://lore.kernel.org/linux-cve-announce/2025100424-CVE-2023-53581-80fa@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-53833
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-53833
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-53833
  • article
    https://lore.kernel.org/linux-cve-announce/2025120954-CVE-2023-53833-09d9@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-40154
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-40154
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-40154
  • article
    https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40154-fd98@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-40304
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-40304
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-40304