Red Hat Security Advisory

RHSA-2026:16312

kernel security update

Released 2026-05-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.113.1.el9_6, libperf-5.14.0-570.113.1.el9_6
Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.113.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.113.1.el9_6, kernel-64k-devel-5.14.0-570.113.1.el9_6 +12
Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.113.1.el9_6, kernel-64k-5.14.0-570.113.1.el9_6, kernel-64k-core-5.14.0-570.113.1.el9_6 +28
Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.113.1.el9_6, kernel-rt-64k-5.14.0-570.113.1.el9_6, kernel-rt-64k-core-5.14.0-570.113.1.el9_6 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.113.1.el9_6, kernel-rt-core-5.14.0-570.113.1.el9_6, kernel-rt-debug-5.14.0-570.113.1.el9_6 +11

Fixes 1 record

TI-2026-31463 CVE-2026-43284 · GHSA-mmw8-mxmc-8w2r

xfrm: esp: avoid in-place decrypt on shared skb frags

HIGH 84

In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.94194 Published 2026-05-08 Fixed in 5.10.255, 5.15.205 +8 CWE-123