Red Hat Security AdvisoryRHSA-2026:14339
kernel security update
Released 2026-05-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.112.1.el9_6, libperf-5.14.0-570.112.1.el9_6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.112.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.112.1.el9_6, kernel-64k-devel-5.14.0-570.112.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.112.1.el9_6, kernel-64k-5.14.0-570.112.1.el9_6, kernel-64k-core-5.14.0-570.112.1.el9_6 +28
- Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.112.1.el9_6, kernel-rt-64k-5.14.0-570.112.1.el9_6, kernel-rt-64k-core-5.14.0-570.112.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.112.1.el9_6, kernel-rt-core-5.14.0-570.112.1.el9_6, kernel-rt-debug-5.14.0-570.112.1.el9_6 +11
Fixes 7 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.98114 · Published 2026-04-22 · Fixed in 5.10.254, 5.15.204 +6 CWE-669
Priority MEDIUM 42
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex item In qla2xxx_process_purls_iocb(), an item is allocated via qla27xx_copy_multiple_pkt(), which internall…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0043 · Published 2025-12-24 · Fixed in 6.6.120, 6.12.63 +3
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is d…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00165 · Published 2026-04-23 · Fixed in 5.10.258, 5.15.209 +7 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled count and the MAD header sizes.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0018 · Published 2026-03-18 · Partial fix · 5.10.252, 5.15.202 +6 CWE-190
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: nfsd: release svc_expkey/svc_export with rcu_work The last reference for `cache_head` can be reduced to zero in `c_show` and `e_show`(using `rcu_read_lo…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00222 · Published 2024-12-27 · Partial fix · 6.1.191, 6.6.64 +3 CWE-416
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account durin…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2026-05-06 · Partial fix · 5.10.254, 5.15.204 +6
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emulated MMIO SPTE, do so *after* dropping/zapping the e…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00191 · Published 2026-04-01 · Partial fix · 5.15.203, 6.1.168 +5
THREATIST.IORead the docs