Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux Kernel: Multiple Vulnerabilities Fixed
published 8 months ago
Summary
Multiple security fixes have been applied to the Linux kernel to address various vulnerabilities that could allow attackers to execute code, cause system crashes, or leak sensitive information. Affected users should update their kernel to the latest version to ensure their system remains secure. This update is recommended for all Linux users.
What to do
- Update redhat bpftool to version 3.10.0-1160.144.1.el7.tuxcare.els2.
- Update redhat kernel to version 3.10.0-1160.144.1.el7.tuxcare.els2.
- Update redhat kernel-debug to version 3.10.0-1160.144.1.el7.tuxcare.els2.
- Update redhat kernel-debug-devel to version 3.10.0-1160.144.1.el7.tuxcare.els2.
- Update redhat kernel-devel to version 3.10.0-1160.144.1.el7.tuxcare.els2.
- Update redhat kernel-headers to version 3.10.0-1160.144.1.el7.tuxcare.els2.
- Update redhat kernel-tools to version 3.10.0-1160.144.1.el7.tuxcare.els2.
- Update redhat kernel-tools-libs to version 3.10.0-1160.144.1.el7.tuxcare.els2.
- Update redhat kernel-tools-libs-devel to version 3.10.0-1160.144.1.el7.tuxcare.els2.
- Update redhat perf to version 3.10.0-1160.144.1.el7.tuxcare.els2.
- Update redhat python-perf to version 3.10.0-1160.144.1.el7.tuxcare.els2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:RHEL:7 | redhat | bpftool |
< 3.10.0-1160.144.1.el7.tuxcare.els2 Fix: upgrade to 3.10.0-1160.144.1.el7.tuxcare.els2
|
| TuxCare:RHEL:7 | redhat | kernel |
< 3.10.0-1160.144.1.el7.tuxcare.els2 Fix: upgrade to 3.10.0-1160.144.1.el7.tuxcare.els2
|
| TuxCare:RHEL:7 | redhat | kernel-debug |
< 3.10.0-1160.144.1.el7.tuxcare.els2 Fix: upgrade to 3.10.0-1160.144.1.el7.tuxcare.els2
|
| TuxCare:RHEL:7 | redhat | kernel-debug-devel |
< 3.10.0-1160.144.1.el7.tuxcare.els2 Fix: upgrade to 3.10.0-1160.144.1.el7.tuxcare.els2
|
| TuxCare:RHEL:7 | redhat | kernel-devel |
< 3.10.0-1160.144.1.el7.tuxcare.els2 Fix: upgrade to 3.10.0-1160.144.1.el7.tuxcare.els2
|
| TuxCare:RHEL:7 | redhat | kernel-headers |
< 3.10.0-1160.144.1.el7.tuxcare.els2 Fix: upgrade to 3.10.0-1160.144.1.el7.tuxcare.els2
|
| TuxCare:RHEL:7 | redhat | kernel-tools |
< 3.10.0-1160.144.1.el7.tuxcare.els2 Fix: upgrade to 3.10.0-1160.144.1.el7.tuxcare.els2
|
| TuxCare:RHEL:7 | redhat | kernel-tools-libs |
< 3.10.0-1160.144.1.el7.tuxcare.els2 Fix: upgrade to 3.10.0-1160.144.1.el7.tuxcare.els2
|
| TuxCare:RHEL:7 | redhat | kernel-tools-libs-devel |
< 3.10.0-1160.144.1.el7.tuxcare.els2 Fix: upgrade to 3.10.0-1160.144.1.el7.tuxcare.els2
|
| TuxCare:RHEL:7 | redhat | perf |
< 3.10.0-1160.144.1.el7.tuxcare.els2 Fix: upgrade to 3.10.0-1160.144.1.el7.tuxcare.els2
|
| TuxCare:RHEL:7 | redhat | python-perf |
< 3.10.0-1160.144.1.el7.tuxcare.els2 Fix: upgrade to 3.10.0-1160.144.1.el7.tuxcare.els2
|
Original advisory text
kernel: Fix of 13 CVEs
- vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618}
- cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945}
- scsi: bfa: Double-free fix {CVE-2025-38699}
- pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574}
- ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}
- fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685}
- fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}
- fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691}
- bna: ensure the copied buf is NUL terminated {CVE-2024-36934}
- i40e: fix idx validation in config queues msg {CVE-2025-39971}
- cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945}
- scsi: bfa: Double-free fix {CVE-2025-38699}
- pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574}
- ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}
- fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685}
- fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}
- fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691}
- bna: ensure the copied buf is NUL terminated {CVE-2024-36934}
- i40e: fix idx validation in config queues msg {CVE-2025-39971}
References
Timeline
Published16 Feb 2026
Updated3 Jun 2026
First seen3 Jun 2026
Sources
CLSA-2026-1771240859 · OSV
Track software like this
Free during beta