Red Hat Security AdvisoryRHSA-2026:13565
kernel security update
Released 2026-05-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-611.54.1.el9_7, kernel-64k-debug-devel-matched-5.14.0-611.54.1.el9_7, kernel-64k-devel-5.14.0-611.54.1.el9_7 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-611.54.1.el9_7, kernel-64k-5.14.0-611.54.1.el9_7, kernel-64k-core-5.14.0-611.54.1.el9_7 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-611.54.1.el9_7, libperf-5.14.0-611.54.1.el9_7
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-611.54.1.el9_7, kernel-rt-64k-5.14.0-611.54.1.el9_7, kernel-rt-64k-core-5.14.0-611.54.1.el9_7 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-611.54.1.el9_7, kernel-rt-core-5.14.0-611.54.1.el9_7, kernel-rt-debug-5.14.0-611.54.1.el9_7 +9
Fixes 5 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.98114 · Published 2026-04-22 · Fixed in 5.10.254, 5.15.204 +6 CWE-669
Priority MEDIUM 51
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf[NFSD4_REPLAY_ISIZE]) to store…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01219 · Published 2026-04-03 · Partial fix · 5.10.253, 5.15.210 +6 CWE-122
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: libceph: reset sparse-read state in osd_fault() When a fault occurs, the connection is abandoned, reestablished, and any pending operations are retried.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00248 · Published 2026-02-14 · Fixed in 6.6.121, 6.12.66 +2 CWE-667
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks As Paolo said earlier [1]: "Since the blamed commit below, classify can…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00137 · Published 2026-03-18 · Partial fix · 5.15.203, 6.1.167 +6 CWE-416
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account durin…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2026-05-06 · Partial fix · 5.10.254, 5.15.204 +6
THREATIST.IORead the docs