Linux · Security advisory · February 15, 2026
RLSA-2026:2282: kernel security update
RLSA-2026:2282, released February 15, 2026, fixes 8 CVEs in kernel (version 0:6.12.0-124.35.1.el10_1). None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
8
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0053
44th percentile
Priority of the 8 CVEs
Patch now 0
Urgent 1
High 7
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel | rocky 10 | 0:6.12.0-124.35.1.el10_1 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-68811 | linux: In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset... | 9.8 | 0.0053 | None reported | |
| High | CVE-2025-40133 | linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: Use __sk_dst_get() and dst_dev_rcu() in m... | 8.1 | 0.0051 | None reported | |
| High | CVE-2025-39933 | smb: client: let recv_done verify data_offset, data_length and remaining_data_length | 7.8 | 0.0035 | None reported | |
| High | CVE-2025-38415 | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0022 | None reported | |
| High | CVE-2025-38403 | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 | None reported | |
| High | CVE-2025-38730 | io_uring/net: commit partial buffers on retry | 7.8 | 0.0017 | None reported | |
| High | CVE-2025-40304 | fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds | 7.8 | 0.0014 | None reported | |
| High | CVE-2025-40322 | fbdev: bitblit: bound-check glyph index in bit_putcs* | 7.8 | 0.0014 | None reported |
Showing 1 to 8 of 8
1