RHSA-2026:1581 | Mondoo Vulnerability Intelligence

RHSA-2026:1581

HIGH7.6

Red Hat Security Advisory: kernel security update

Published Jan 30, 2026

Modified 4 days ago

Fix available

Affected Packages(26 packages)

bpftool

Red Hat rhel_els 7

Fixed in:

0:3.10.0-1160.146.1.el7

bpftool-debuginfo

Red Hat rhel_els 7

Fixed in:

0:3.10.0-1160.146.1.el7

kernel

Red Hat rhel_els 7

Fixed in:

0:3.10.0-1160.146.1.el7

kernel-abi-whitelists

Red Hat rhel_els 7

Fixed in:

0:3.10.0-1160.146.1.el7

kernel-bootwrapper

Red Hat rhel_els 7

Fixed in:

0:3.10.0-1160.146.1.el7

kernel-debug

Red Hat rhel_els 7

Fixed in:

0:3.10.0-1160.146.1.el7

kernel-debug-debuginfo

Red Hat rhel_els 7

Fixed in:

0:3.10.0-1160.146.1.el7

kernel-debug-devel

Red Hat rhel_els 7

Fixed in:

0:3.10.0-1160.146.1.el7

kernel-debuginfo

Red Hat rhel_els 7

Fixed in:

0:3.10.0-1160.146.1.el7

kernel-debuginfo-common-ppc64

Red Hat rhel_els 7

Fixed in:

0:3.10.0-1160.146.1.el7

References

https://access.redhat.com/errata/RHSA-2026:1581

https://access.redhat.com/security/cve/CVE-2025-39898

https://access.redhat.com/security/cve/CVE-2025-39971

https://access.redhat.com/security/cve/CVE-2025-40248

https://access.redhat.com/security/updates/classification/#important

https://bugzilla.redhat.com/show_bug.cgi?id=2400598

https://bugzilla.redhat.com/show_bug.cgi?id=2404108

https://bugzilla.redhat.com/show_bug.cgi?id=2418872

https://lore.kernel.org/linux-cve-announce/2025100116-CVE-2025-39898-d844@gregkh/T

https://lore.kernel.org/linux-cve-announce/2025101556-CVE-2025-39971-97e2@gregkh/T

https://lore.kernel.org/linux-cve-announce/2025120430-CVE-2025-40248-506e@gregkh/T

https://nvd.nist.gov/vuln/detail/CVE-2025-39898

https://nvd.nist.gov/vuln/detail/CVE-2025-39971

https://nvd.nist.gov/vuln/detail/CVE-2025-40248

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1581.json

https://www.cve.org/CVERecord?id=CVE-2025-39898

https://www.cve.org/CVERecord?id=CVE-2025-39971

https://www.cve.org/CVERecord?id=CVE-2025-40248

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Upstream

CVE-2025-39898 CVE-2025-39971 CVE-2025-40248

Ecosystems

Red Hat rhel_els 7

Timeline

PublishedJan 30, 2026

ModifiedMar 9, 2026