RLSA-2026:1143

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting (CVE-2025-38141)

• kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349)

• kernel: drm/xe: Fix vmbindioctl double free bug (CVE-2025-38731)

• kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)

• kernel: mptcp: fix race condition in mptcpschedulework() (CVE-2025-40258)

• kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service (CVE-2025-40294)

• kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)

• kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.