Red Hat Security Advisory

RHSA-2026:13664

kernel security update

Released 2026-05-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.190.1.el8_6, kernel-4.18.0-372.190.1.el8_6, kernel-abi-stablelists-4.18.0-372.190.1.el8_6 +14
Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.190.1.el8_6, kernel-4.18.0-372.190.1.el8_6, kernel-abi-stablelists-4.18.0-372.190.1.el8_6 +19
Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.190.1.el8_6, kernel-4.18.0-372.190.1.el8_6, kernel-abi-stablelists-4.18.0-372.190.1.el8_6 +14

Fixes 4 records

TI-2026-23961 CVE-2026-31402 · GHSA-7xf5-3qmr-j4c6

nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

MEDIUM 51

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf[NFSD4_REPLAY_ISIZE]) to store…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01219 Published 2026-04-03 Partial fix · 5.10.253, 5.15.210 +6 CWE-122

TI-2026-18630 CVE-2026-23193 · GHSA-fccp-g2rw-8q2g

scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() In iscsit_dec_session_usage_count(), the function calls complete() while hol…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00363 Published 2026-02-14 Partial fix · 5.10.250, 5.15.200 +5 CWE-416

TI-2025-43369 CVE-2025-71238 · GHSA-7hgf-78m2-x598

scsi: qla2xxx: Fix bsg_done() causing double free

LOW 35

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix bsg_done() causing double free Kernel panic observed on system, [5353358.825191] BUG: unable to handle page fault for address: ff5f5e…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00216 Published 2026-03-04 Partial fix · 5.10.251, 5.15.201 +6 CWE-415

TI-2026-18534 CVE-2026-23097 · GHSA-3gqm-m375-7mp2

migrate: correct lock ordering for hugetlb file folios

LOW 24

In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock (analyzed by Lance Yang): 1) Task (5749): Holds folio_lock, then trie…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00107 Published 2026-02-04 Partial fix · 5.10, 5.10.249 +6 CWE-362