Read the docs
Red Hat Security Advisory

RHSA-2026:14925

kernel security update

Released 2026-05-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2026-23961 CVE-2026-31402 · GHSA-7xf5-3qmr-j4c6

nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

Priority MEDIUM 51

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf[NFSD4_REPLAY_ISIZE]) to store…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01219 Published 2026-04-03 Partial fix · 5.10.253, 5.15.210 +6 CWE-122
TI-2026-18628 CVE-2026-23191 · GHSA-x3gh-q355-f5px

ALSA: aloop: Fix racy access at PCM trigger

Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00133 Published 2026-02-14 Partial fix · 5.10.270, 5.15.221 +5 CWE-362
TI-2025-26910 CVE-2025-40240 · GHSA-p7wh-phc3-g7xr

sctp: avoid NULL dereference when chunk data buffer is missing

Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk->skb pointer is dereferenced in the if-block where it's supposed to be NULL only.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00644 Published 2025-12-04 Partial fix · 5.4.301, 5.10.246 +6
TI-2018-12095 CVE-2018-16885 · GHSA-cvhh-gmhx-mhv4

Out-of-bounds read in backstage kernel

Priority LOW 25

A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00424 Published 2019-01-03 Partial fix CWE-125