Red Hat Security Advisory

RHSA-2026:14230

kernel security update

Released 2026-05-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.191.1.el8_6, kernel-4.18.0-372.191.1.el8_6, kernel-abi-stablelists-4.18.0-372.191.1.el8_6 +14
Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.191.1.el8_6, kernel-4.18.0-372.191.1.el8_6, kernel-abi-stablelists-4.18.0-372.191.1.el8_6 +19
Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.191.1.el8_6, kernel-4.18.0-372.191.1.el8_6, kernel-abi-stablelists-4.18.0-372.191.1.el8_6 +14

Fixes 4 records

TI-2026-23989 CVE-2026-31431 · GHSA-2274-3hgr-wxv6

crypto: algif_aead - Revert to operating out-of-place

CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.98114 Published 2026-04-22 Fixed in 5.10.254, 5.15.204 +6 CWE-669

TI-2026-18628 CVE-2026-23191 · GHSA-x3gh-q355-f5px

ALSA: aloop: Fix racy access at PCM trigger

LOW 35

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00133 Published 2026-02-14 Partial fix · 5.10.270, 5.15.221 +5 CWE-362

TI-2026-31257 CVE-2026-43077 · GHSA-6m8x-q95v-ph67

crypto: algif_aead - Fix minimum RX size check for decryption

LOW 24

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account durin…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00123 Published 2026-05-06 Partial fix · 5.10.254, 5.15.204 +6

TI-2026-18836 CVE-2026-23401 · GHSA-2g4m-3wvw-crq2

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

LOW 24

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emulated MMIO SPTE, do so *after* dropping/zapping the e…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00191 Published 2026-04-01 Partial fix · 5.15.203, 6.1.168 +5