Red Hat Security Advisory: kernel security update

Fixed packages 49

Vulnerabilities 3

• High 8.8
  CVE-2026-46056

  Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), o…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 27, 2026
• High 7.8
  CVE-2026-64191

  i2c: stub: Reject I2C block transfers with invalid length

  In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2C_SMBUS_I2C_BLOCK_DATA case in stub_xfer() uses data->block[0] as the transfer length. The existing check only clamps it to avo…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 20, 2026
• Medium 6.8
  CVE-2026-53196

  USB: serial: io_ti: fix heap overflow in get_manuf_info()

  In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads le16_to_cpu(rom_desc->Size) bytes from the device I2C EEPROM into a buffer allocated with kmalloc_obj(), which…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 25, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2482181
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2492750
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2502872
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65709.json
• report
  https://access.redhat.com/security/cve/CVE-2026-46056
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-46056
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-46056
• article
  https://lore.kernel.org/linux-cve-announce/2026052754-CVE-2026-46056-0ff1@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-53196
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-53196
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-53196
• article
  https://lore.kernel.org/linux-cve-announce/2026062559-CVE-2026-53196-bcc6@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-64191
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-64191
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-64191
• article
  https://lore.kernel.org/linux-cve-announce/2026072052-CVE-2026-64191-42fe@gregkh/T