# RHSA-2026:65334: kernel security update RHSA-2026:65334, released September 10, 2026, fixes 27 CVEs in kernel (version 6.12.0-211.53.1.el10_2). None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/rhsa-2026-65334 - Platform: Linux - Released: Sep 10, 2026 - Priority: Urgent (Closes CVE-2026-72129, rated Critical) - CVEs: 27, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2026:65334 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | RHEL 10 | 6.12.0-211.53.1.el10_2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-72129](https://patchblox.com/security/data/cve/CVE-2026-72129.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero of... | 9.8 | 0.0071 | | | [CVE-2026-52947](https://patchblox.com/security/data/cve/CVE-2026-52947.md) | Urgent | net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove | 9.8 | 0.0011 | | | [CVE-2026-64037](https://patchblox.com/security/data/cve/CVE-2026-64037.md) | High | kernel-rt-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0043 | | | [CVE-2026-63947](https://patchblox.com/security/data/cve/CVE-2026-63947.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0035 | | | [CVE-2026-63944](https://patchblox.com/security/data/cve/CVE-2026-63944.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix UAF in hci_le_create_cis... | 8.8 | 0.0033 | | | [CVE-2026-68409](https://patchblox.com/security/data/cve/CVE-2026-68409.md) | High | wifi: mac80211: defer link RX stats percpu free to RCU | 8.8 | 0.0031 | | | [CVE-2026-43334](https://patchblox.com/security/data/cve/CVE-2026-43334.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements... | 8.8 | 0.0028 | | | [CVE-2026-53254](https://patchblox.com/security/data/cve/CVE-2026-53254.md) | High | Bluetooth: RFCOMM: validate skb length in MCC handlers | 8.1 | 0.0028 | | | [CVE-2026-63975](https://patchblox.com/security/data/cve/CVE-2026-63975.md) | High | kernel-rt-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0027 | | | [CVE-2026-64255](https://patchblox.com/security/data/cve/CVE-2026-64255.md) | High | wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers | 8.8 | 0.0027 | | | [CVE-2026-64117](https://patchblox.com/security/data/cve/CVE-2026-64117.md) | High | wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb | 8.8 | 0.0027 | | | [CVE-2026-53256](https://patchblox.com/security/data/cve/CVE-2026-53256.md) | High | kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0026 | | | [CVE-2026-63946](https://patchblox.com/security/data/cve/CVE-2026-63946.md) | High | kernel-64k-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0026 | | | [CVE-2026-64515](https://patchblox.com/security/data/cve/CVE-2026-64515.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If eith... | 8.3 | 0.0024 | | | [CVE-2026-52918](https://patchblox.com/security/data/cve/CVE-2026-52918.md) | High | Bluetooth: serialize accept_q access | 8.8 | 0.0022 | | | [CVE-2026-68193](https://patchblox.com/security/data/cve/CVE-2026-68193.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio... | 8.1 | 0.0021 | | | [CVE-2026-53072](https://patchblox.com/security/data/cve/CVE-2026-53072.md) | High | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER | 8.8 | 0.0020 | | | [CVE-2026-68307](https://patchblox.com/security/data/cve/CVE-2026-68307.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link repl... | 8.1 | 0.0017 | | | [CVE-2026-64015](https://patchblox.com/security/data/cve/CVE-2026-64015.md) | High | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0016 | | | [CVE-2026-46123](https://patchblox.com/security/data/cve/CVE-2026-46123.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtio_bt: clamp rx length before skb... | 8.1 | 0.0014 | | | [CVE-2026-64042](https://patchblox.com/security/data/cve/CVE-2026-64042.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0014 | | | [CVE-2026-53091](https://patchblox.com/security/data/cve/CVE-2026-53091.md) | High | net: pull headers in qdisc_pkt_len_segs_init() | 8.4 | 0.0014 | | | [CVE-2026-43133](https://patchblox.com/security/data/cve/CVE-2026-43133.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emu... | 8.1 | 0.0013 | | | [CVE-2026-53322](https://patchblox.com/security/data/cve/CVE-2026-53322.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling funct... | 8.8 | 0.0013 | | | [CVE-2026-53182](https://patchblox.com/security/data/cve/CVE-2026-53182.md) | High | wifi: nl80211: reject oversized EMA RNR lists | 8.1 | 0.0013 | | | [CVE-2026-53209](https://patchblox.com/security/data/cve/CVE-2026-53209.md) | High | Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend | 8.1 | 0.0013 | | | [CVE-2026-64051](https://patchblox.com/security/data/cve/CVE-2026-64051.md) | High | kernel-rt-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0013 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo