Skip to content
OpenAdvisories
High RHSA-2026:3275 4 CVEs

Red Hat Security Advisory: kernel security update

Published Feb 25, 2026 · Updated Jul 30, 2026

Ecosystem: Red Hat

Fixed packages 90

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.1 kernel 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-devel 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-devel-matched 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-modules 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-modules-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-modules-extra 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-devel 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-devel-matched 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-modules 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-modules-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-modules-extra 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-abi-stablelists 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-devel 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-devel-matched 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-modules 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-modules-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-modules-extra 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-uki-virt 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debuginfo-common-aarch64 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debuginfo-common-ppc64le 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debuginfo-common-s390x 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debuginfo-common-x86_64 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-devel 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-devel-matched 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-doc 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-modules 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-modules-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-modules-extra 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-modules-extra-matched 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug-devel 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug-modules 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug-modules-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug-modules-extra 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-devel 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-modules 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-modules-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-modules-extra 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug-devel 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug-modules 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug-modules-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug-modules-extra 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-devel 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-modules 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-modules-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-modules-extra 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-tools 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-tools-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-tools-libs 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-tools-libs-devel 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-uki-virt 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-uki-virt-addons 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-devel 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-devel-matched 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-modules 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-modules-core 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-modules-extra 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 libperf 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 libperf-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 perf 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 perf-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 python3-perf 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 python3-perf-debuginfo 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 rtla 0:6.12.0-124.39.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 rv 0:6.12.0-124.39.1.el10_1

Vulnerabilities 4

  • High 8.1
    CVE-2025-40168

    smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().

    In the Linux kernel, the following vulnerability has been resolved: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). smc_clc_prfx_match() is called from smc_listen_work() and not under RCU nor RTNL. Using sk_dst_get(sk)->dev could trigger UA…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38206

    exfat: fix double free in delayed_free

    In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path. exfat_create_upcase_table() exfat_create_upcase_table() : return error exfat_free_upcase_table() : f…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-40096

    drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

    In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies When adding dependencies with drm_sched_job_add_dependency(), that function consumes the fence reference both on su…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-68800

    mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats

    In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Cited commit added a dedicated mutex (instead of RTNL) to protect the multicast route list, so that it will not chan…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376377
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2407333
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2414482
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2429065
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3275.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-38206
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38206
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38206
  • article
    https://lore.kernel.org/linux-cve-announce/2025070420-CVE-2025-38206-a077@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-40096
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-40096
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-40096
  • article
    https://lore.kernel.org/linux-cve-announce/2025103016-CVE-2025-40096-09cc@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-40168
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-40168
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-40168
  • article
    https://lore.kernel.org/linux-cve-announce/2025111256-CVE-2025-40168-bdd5@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-68800
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-68800
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-68800
  • article
    https://lore.kernel.org/linux-cve-announce/2026011307-CVE-2025-68800-39d2@gregkh/T