# RHSA-2026:2212: Security update for 72 packages

RHSA-2026:2212, released February 9, 2026, fixes 16 CVEs across 72 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/rhsa-2026-2212
- Platform: Linux
- Released: Feb 9, 2026
- Priority: High (Closes CVE-2025-40135, high severity)
- CVEs: 16, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://access.redhat.com/errata/RHSA-2026:2212

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k](https://patchblox.com/security/data/product/linux/kernel-64k.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-core](https://patchblox.com/security/data/product/linux/kernel-64k-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-debug](https://patchblox.com/security/data/product/linux/kernel-64k-debug.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel-matched.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-extra.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-devel](https://patchblox.com/security/data/product/linux/kernel-64k-devel.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-devel-matched.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-modules](https://patchblox.com/security/data/product/linux/kernel-64k-modules.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-modules-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-modules-extra.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-debug-devel-matched.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-debug-modules-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-debug-uki-virt](https://patchblox.com/security/data/product/linux/kernel-debug-uki-virt.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-devel-matched](https://patchblox.com/security/data/product/linux/kernel-devel-matched.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-modules-core](https://patchblox.com/security/data/product/linux/kernel-modules-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-64k](https://patchblox.com/security/data/product/linux/kernel-rt-64k.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-64k-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-64k-debug](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-devel.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules-extra.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-64k-devel](https://patchblox.com/security/data/product/linux/kernel-rt-64k-devel.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-64k-modules](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules-extra.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-core](https://patchblox.com/security/data/product/linux/kernel-rt-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-debug-devel.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-extra.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-devel](https://patchblox.com/security/data/product/linux/kernel-rt-devel.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-modules](https://patchblox.com/security/data/product/linux/kernel-rt-modules.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-modules-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-rt-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-modules-extra.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-uki-virt](https://patchblox.com/security/data/product/linux/kernel-uki-virt.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-uki-virt-addons](https://patchblox.com/security/data/product/linux/kernel-uki-virt-addons.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-zfcpdump-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-zfcpdump-devel](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-zfcpdump-devel-matched](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel-matched.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-zfcpdump-modules](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-zfcpdump-modules-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-core.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [kernel-zfcpdump-modules-extra](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-extra.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [libperf](https://patchblox.com/security/data/product/linux/libperf.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [rtla](https://patchblox.com/security/data/product/linux/rtla.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| [rv](https://patchblox.com/security/data/product/linux/rv.md) | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-40135](https://patchblox.com/security/data/cve/CVE-2025-40135.md) | High | ipv6: use RCU in ip6_xmit() | 8.4 | 0.0071 |  |
| [CVE-2025-40158](https://patchblox.com/security/data/cve/CVE-2025-40158.md) | High | ipv6: use RCU in ip6_output() | 8.1 | 0.0056 |  |
| [CVE-2025-40271](https://patchblox.com/security/data/cve/CVE-2025-40271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/proc: fix uaf in proc_readdir_de()  Pde is er... | 7.8 | 0.0049 |  |
| [CVE-2025-40141](https://patchblox.com/security/data/cve/CVE-2025-40141.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: ISO: Fix possible UAF on iso_conn_fre... | 8.0 | 0.0032 |  |
| [CVE-2025-40318](https://patchblox.com/security/data/cve/CVE-2025-40318.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: hci_sync: fix race in hci_cmd_sync_de... | 8.8 | 0.0027 |  |
| [CVE-2025-38024](https://patchblox.com/security/data/cve/CVE-2025-38024.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0023 |  |
| [CVE-2025-37819](https://patchblox.com/security/data/cve/CVE-2025-37819.md) | High | irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | 7.8 | 0.0023 |  |
| [CVE-2025-37789](https://patchblox.com/security/data/cve/CVE-2025-37789.md) | High | net: openvswitch: fix nested key length validation in the set() action | 7.8 | 0.0022 |  |
| [CVE-2025-38415](https://patchblox.com/security/data/cve/CVE-2025-38415.md) | High | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0022 |  |
| [CVE-2025-38403](https://patchblox.com/security/data/cve/CVE-2025-38403.md) | High | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 |  |
| [CVE-2025-38459](https://patchblox.com/security/data/cve/CVE-2025-38459.md) | High | atm: clip: Fix infinite recursive call of clip_push(). | 7.8 | 0.0021 |  |
| [CVE-2025-38022](https://patchblox.com/security/data/cve/CVE-2025-38022.md) | High | RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem | 7.8 | 0.0020 |  |
| [CVE-2025-40170](https://patchblox.com/security/data/cve/CVE-2025-40170.md) | High | net: use dst_dev_rcu() in sk_setup_caps() | 8.1 | 0.0019 |  |
| [CVE-2025-40269](https://patchblox.com/security/data/cve/CVE-2025-40269.md) | High | ALSA: usb-audio: Fix potential overflow of PCM transfer buffer | 7.8 | 0.0019 |  |
| [CVE-2025-39760](https://patchblox.com/security/data/cve/CVE-2025-39760.md) | High | usb: core: config: Prevent OOB read in SS endpoint companion parsing | 7.8 | 0.0018 |  |
| [CVE-2025-38730](https://patchblox.com/security/data/cve/CVE-2025-38730.md) | High | io_uring/net: commit partial buffers on retry | 7.8 | 0.0017 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo