Linux · Security advisory · December 16, 2025
RHSA-2026:1727: kernel security update
RHSA-2026:1727, released December 16, 2025, fixes 16 CVEs in kernel (version 6.12.0-55.58.1.el10_0). None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
16
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0064
51st percentile
Priority of the 16 CVEs
Patch now 0
Urgent 1
High 15
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel | RHEL 10 | 6.12.0-55.58.1.el10_0 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-40251 | devlink: rate: Unset parent pointer in devl_rate_nodes_destroy | 9.8 | 0.0017 | None reported | |
| High | CVE-2025-40240 | sctp: avoid NULL dereference when chunk data buffer is missing | 8.6 | 0.0064 | None reported | |
| High | CVE-2025-40133 | linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: Use __sk_dst_get() and dst_dev_rcu() in m... | 8.1 | 0.0051 | None reported | |
| High | CVE-2025-40258 | mptcp: fix race condition in mptcp_schedule_work() | 9.8 | 0.0050 | None reported | |
| High | CVE-2025-68301 | net: atlantic: fix fragment overflow handling in RX path | 9.8 | 0.0047 | None reported | |
| High | CVE-2025-39933 | smb: client: let recv_done verify data_offset, data_length and remaining_data_length | 7.8 | 0.0035 | None reported | |
| High | CVE-2023-53034 | ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans | 7.5 | 0.0029 | None reported | |
| High | CVE-2025-40301 | Bluetooth: hci_event: validate skb length for unknown CC opcode | 7.8 | 0.0027 | None reported | |
| High | CVE-2025-40318 | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_de... | 8.8 | 0.0027 | None reported | |
| High | CVE-2025-38453 | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0019 | None reported | |
| High | CVE-2025-38172 | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0018 | None reported | |
| High | CVE-2025-38568 | net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing | 7.8 | 0.0018 | None reported | |
| High | CVE-2025-40248 | vsock: Ignore signal/timeout on connect() if already established | 7.8 | 0.0017 | None reported | |
| High | CVE-2025-40047 | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry i... | 7.8 | 0.0016 | None reported | |
| High | CVE-2025-40304 | fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds | 7.8 | 0.0014 | None reported | |
| High | CVE-2025-40322 | fbdev: bitblit: bound-check glyph index in bit_putcs* | 7.8 | 0.0014 | None reported |
Showing 1 to 16 of 16
1