redhat/kpatch-patch vulnerabilities

Latest redhat/kpatch-patch CVEs

Newest publication first · page 3 of 3

1. CVE-2026-23111 netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

   Published 2026-02-13

   High·CVSS 7.8 EPSS 1.1%

   In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft_mapelem_activate() a...

2. CVE-2025-68285 libceph: fix potential use-after-free in have_mon_and_osd_map()

   Published 2025-12-16

   Critical·CVSS 9.8 EPSS 0.59%

   In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_and_osd_map() The wait loop in __ceph_open_session() can race with the client receiving a new monmap or osdmap shortly after the initial map is received. Both cep...

3. CVE-2025-40248 vsock: Ignore signal/timeout on connect() if already established

   Published 2025-12-04

   High·CVSS 7.8 EPSS 0.17%

   In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect() if already established During connect(), acting on a signal/timeout by disconnecting an already established socket leads to several issues: connect() invoking vsock_trans...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.