Linux · Security advisory · February 9, 2026
RHSA-2026:2212: Security update for 72 packages
RHSA-2026:2212, released February 9, 2026, fixes 16 CVEs across 72 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
16
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0071
53rd percentile
Priority of the 16 CVEs
Patch now 0
Urgent 0
High 16
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-debug | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-debug-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-debug-devel | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-debug-devel-matched | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-debug-modules | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-debug-modules-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-debug-modules-extra | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-devel | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-devel-matched | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-modules | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-modules-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-64k-modules-extra | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-abi-stablelists | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-debug | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-debug-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-debug-devel | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-debug-devel-matched | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-debug-modules | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-debug-modules-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-debug-modules-extra | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-debug-uki-virt | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-devel | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-devel-matched | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-doc | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-modules | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-modules-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-modules-extra | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-64k | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-64k-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-64k-debug | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-64k-debug-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-64k-debug-devel | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-64k-debug-modules | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-64k-debug-modules-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-64k-debug-modules-extra | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-64k-devel | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-64k-modules | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-64k-modules-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-64k-modules-extra | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-debug | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-debug-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-debug-devel | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-debug-modules | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-debug-modules-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-debug-modules-extra | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-devel | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-modules | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-modules-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-rt-modules-extra | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-tools | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-tools-libs | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-tools-libs-devel | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-uki-virt | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-uki-virt-addons | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-zfcpdump | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-zfcpdump-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-zfcpdump-devel | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-zfcpdump-devel-matched | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-zfcpdump-modules | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-zfcpdump-modules-core | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| kernel-zfcpdump-modules-extra | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| libperf | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| perf | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| python3-perf | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| rtla | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
| rv | RHEL 9 | 0:5.14.0-611.30.1.el9_7 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2025-40135 | ipv6: use RCU in ip6_xmit() | 8.4 | 0.0071 | None reported | |
| High | CVE-2025-40158 | ipv6: use RCU in ip6_output() | 8.1 | 0.0056 | None reported | |
| High | CVE-2025-40271 | linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is er... | 7.8 | 0.0049 | None reported | |
| High | CVE-2025-40141 | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix possible UAF on iso_conn_fre... | 8.0 | 0.0032 | None reported | |
| High | CVE-2025-40318 | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_de... | 8.8 | 0.0027 | None reported | |
| High | CVE-2025-38024 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0023 | None reported | |
| High | CVE-2025-37819 | irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | 7.8 | 0.0023 | None reported | |
| High | CVE-2025-37789 | net: openvswitch: fix nested key length validation in the set() action | 7.8 | 0.0022 | None reported | |
| High | CVE-2025-38415 | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0022 | None reported | |
| High | CVE-2025-38403 | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 | None reported | |
| High | CVE-2025-38459 | atm: clip: Fix infinite recursive call of clip_push(). | 7.8 | 0.0021 | None reported | |
| High | CVE-2025-38022 | RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem | 7.8 | 0.0020 | None reported | |
| High | CVE-2025-40170 | net: use dst_dev_rcu() in sk_setup_caps() | 8.1 | 0.0019 | None reported | |
| High | CVE-2025-40269 | ALSA: usb-audio: Fix potential overflow of PCM transfer buffer | 7.8 | 0.0019 | None reported | |
| High | CVE-2025-39760 | usb: core: config: Prevent OOB read in SS endpoint companion parsing | 7.8 | 0.0018 | None reported | |
| High | CVE-2025-38730 | io_uring/net: commit partial buffers on retry | 7.8 | 0.0017 | None reported |
Showing 1 to 16 of 16
1