Linux · Security advisory · October 15, 2025

RHSA-2026:0271: kernel security update

RHSA-2026:0271, released October 15, 2025, fixes 8 CVEs in kernel (version 6.12.0-55.52.1.el10_0). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
8
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0038
31st percentile

Priority of the 8 CVEs

Patch now 0 Urgent 1 High 7 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelRHEL 106.12.0-55.52.1.el10_0

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-39925 can: j1939: implement NETDEV_UNREGISTER notification handler 9.8 0.0015 None reported
High CVE-2025-40300 x86/vmscape: Add conditional IBPB mitigation 7.3 0.0038 None reported
High CVE-2025-39982 Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync 8.8 0.0028 None reported
High CVE-2025-39983 linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_conn_tx_deq... 8.8 0.0025 None reported
High CVE-2025-39806 kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... 7.8 0.0024 None reported
High CVE-2025-39883 mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory 7.6 0.0016 None reported
High CVE-2025-39981 Bluetooth: MGMT: Fix possible UAFs 7.8 0.0015 None reported
High CVE-2025-39843 mm: slub: avoid wake up kswapd in set_track_prepare 7.8 0.0012 None reported
Showing 1 to 8 of 8 1