Red Hat Security Advisory: kernel security update

Fixed packages 158

Vulnerabilities 8

• High 8.8
  CVE-2026-23193

  scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

  In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() In iscsit_dec_session_usage_count(), the function calls complete() while holding the sess->session_usage_lock. Simi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 14, 2026
• High 7.8
  CVE-2025-38180

  net: atm: fix /proc/net/atm/lec handling

  In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev_lec[] changes. It appears it had dev_put() calls without prior dev_hold(), leading to imbalance and U…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 4, 2025
• High 7.8
  CVE-2025-40096

  drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

  In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies When adding dependencies with drm_sched_job_add_dependency(), that function consumes the fence reference both on su…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Oct 30, 2025
• High 7.8
  CVE-2026-23171

  bonding: fix use-after-free due to enslave fail after slave array update

  In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free due to enslave fail after slave array update Fix a use-after-free which happens due to enslave failure after the new slave has been added to the array. Since the n…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 14, 2026
• High 7.8
  CVE-2026-23191

  ALSA: aloop: Fix racy access at PCM trigger

  In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since b…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 14, 2026
• High 7.8
  CVE-2026-23209

  macvlan: fix error recovery in macvlan_common_newlink()

  In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice repro to crash the kernel: ip link add p1 type veth peer p2 ip link set address 00:00:00:00:00:20 dev p1 ip link …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 14, 2026
• High 7.1
  CVE-2026-23204

  net/sched: cls_u32: use skb_header_pointer_careful()

  In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values. Use skb_header_pointer_careful() instead. GangMin Kim provided a rep…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 14, 2026
• Unscored —
  CVE-2026-23144

  mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure

  In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure When a context DAMON sysfs directory setup is failed after setup of attrs/ directory, subdirectories of attrs/ directory are…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 14, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2376376
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2407333
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2439872
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2439886
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2439887
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2439900
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2439931
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2439947
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6153.json
• report
  https://access.redhat.com/security/cve/CVE-2025-38180
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-38180
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-38180
• article
  https://lore.kernel.org/linux-cve-announce/2025070410-CVE-2025-38180-c6d0@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-40096
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40096
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40096
• article
  https://lore.kernel.org/linux-cve-announce/2025103016-CVE-2025-40096-09cc@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23144
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23144
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23144
• article
  https://lore.kernel.org/linux-cve-announce/2026021417-CVE-2026-23144-297b@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23171
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23171
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23171
• article
  https://lore.kernel.org/linux-cve-announce/2026021421-CVE-2026-23171-5a73@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23191
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23191
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23191
• article
  https://lore.kernel.org/linux-cve-announce/2026021433-CVE-2026-23191-f990@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23193
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23193
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23193
• article
  https://lore.kernel.org/linux-cve-announce/2026021434-CVE-2026-23193-2c6c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23204
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23204
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23204
• article
  https://lore.kernel.org/linux-cve-announce/2026021437-CVE-2026-23204-be85@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23209