Red Hat Security AdvisoryRHSA-2026:13566
kernel security update
Released 2026-05-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-124.55.1.el10_1, kernel-64k-debug-devel-matched-6.12.0-124.55.1.el10_1, kernel-64k-devel-6.12.0-124.55.1.el10_1 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-124.55.1.el10_1, kernel-64k-6.12.0-124.55.1.el10_1, kernel-64k-core-6.12.0-124.55.1.el10_1 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-124.55.1.el10_1, libperf-6.12.0-124.55.1.el10_1
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-124.55.1.el10_1, kernel-rt-64k-6.12.0-124.55.1.el10_1, kernel-rt-64k-core-6.12.0-124.55.1.el10_1 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-124.55.1.el10_1, kernel-rt-core-6.12.0-124.55.1.el10_1, kernel-rt-debug-6.12.0-124.55.1.el10_1 +9
Fixes 5 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.98114 · Published 2026-04-22 · Fixed in 5.10.254, 5.15.204 +6 CWE-669
Priority MEDIUM 51
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf[NFSD4_REPLAY_ISIZE]) to store…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01219 · Published 2026-04-03 · Partial fix · 5.10.253, 5.15.210 +6 CWE-122
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original skb for the last slave (determined by bond_is_last_s…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00129 · Published 2026-04-13 · Partial fix · 5.10.273, 5.15.224 +7 CWE-362
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks As Paolo said earlier [1]: "Since the blamed commit below, classify can…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00137 · Published 2026-03-18 · Partial fix · 5.15.203, 6.1.167 +6 CWE-416
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account durin…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2026-05-06 · Partial fix · 5.10.254, 5.15.204 +6
THREATIST.IORead the docs