Red Hat Security Advisory

RHSA-2026:14165

kernel security update

Released 2026-05-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.190.1.el8_4, kernel-4.18.0-305.190.1.el8_4, kernel-abi-stablelists-4.18.0-305.190.1.el8_4 +14
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bpftool-4.18.0-305.190.1.el8_4, kernel-4.18.0-305.190.1.el8_4, kernel-abi-stablelists-4.18.0-305.190.1.el8_4 +14

Fixes 5 records

TI-2026-23989 CVE-2026-31431 · GHSA-2274-3hgr-wxv6

crypto: algif_aead - Revert to operating out-of-place

CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.98114 Published 2026-04-22 Fixed in 5.10.254, 5.15.204 +6 CWE-669

TI-2026-23961 CVE-2026-31402 · GHSA-7xf5-3qmr-j4c6

nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

MEDIUM 51

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf[NFSD4_REPLAY_ISIZE]) to store…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01219 Published 2026-04-03 Partial fix · 5.10.253, 5.15.210 +6 CWE-122

TI-2026-18630 CVE-2026-23193 · GHSA-fccp-g2rw-8q2g

scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() In iscsit_dec_session_usage_count(), the function calls complete() while hol…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00363 Published 2026-02-14 Partial fix · 5.10.250, 5.15.200 +5 CWE-416

TI-2025-43369 CVE-2025-71238 · GHSA-7hgf-78m2-x598

scsi: qla2xxx: Fix bsg_done() causing double free

LOW 35

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix bsg_done() causing double free Kernel panic observed on system, [5353358.825191] BUG: unable to handle page fault for address: ff5f5e…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00216 Published 2026-03-04 Partial fix · 5.10.251, 5.15.201 +6 CWE-415

TI-2026-31257 CVE-2026-43077 · GHSA-6m8x-q95v-ph67

crypto: algif_aead - Fix minimum RX size check for decryption

LOW 24

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account durin…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00123 Published 2026-05-06 Partial fix · 5.10.254, 5.15.204 +6