Red Hat Security AdvisoryRHSA-2026:13932
kernel security update
Released 2026-05-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.124.1.el9_4, libperf-5.14.0-427.124.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.124.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.124.1.el9_4, kernel-64k-devel-5.14.0-427.124.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.124.1.el9_4, kernel-5.14.0-427.124.1.el9_4, kernel-64k-5.14.0-427.124.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.124.1.el9_4, kernel-rt-core-5.14.0-427.124.1.el9_4, kernel-rt-debug-5.14.0-427.124.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.124.1.el9_4, kernel-rt-core-5.14.0-427.124.1.el9_4, kernel-rt-debug-5.14.0-427.124.1.el9_4 +11
Fixes 6 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.98114 · Published 2026-04-22 · Fixed in 5.10.254, 5.15.204 +6 CWE-669
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is d…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00165 · Published 2026-04-23 · Fixed in 5.10.258, 5.15.209 +7 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substr…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00133 · Published 2026-02-14 · Partial fix · 5.10.270, 5.15.221 +5 CWE-362
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix bsg_done() causing double free Kernel panic observed on system, [5353358.825191] BUG: unable to handle page fault for address: ff5f5e…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00216 · Published 2026-03-04 · Partial fix · 5.10.251, 5.15.201 +6 CWE-415
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account durin…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2026-05-06 · Partial fix · 5.10.254, 5.15.204 +6
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emulated MMIO SPTE, do so *after* dropping/zapping the e…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00191 · Published 2026-04-01 · Partial fix · 5.15.203, 6.1.168 +5
THREATIST.IORead the docs