Read the docs
Red Hat Security Advisory

RHSA-2026:18587

kernel security update

Released 2026-05-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 15 records

TI-2025-25743 CVE-2025-38405 · GHSA-5g8h-g27f-mh64

nvmet: fix memory leak of bio integrity

Priority LOW 39

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet receives commands with metadata there is a continuous memory leak of kmalloc-128 slab or more precisely…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00429 Published 2025-07-25 Partial fix · 6.11, 6.12.37 +2 CWE-401
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurred when __mark_inode_dirty() get the bdi_writeback that was in t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00314 Published 2025-09-19 Partial fix · 5.10.247, 5.15.192 +5 CWE-416
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled count and the MAD header sizes.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0018 Published 2026-03-18 Partial fix · 5.10.252, 5.15.202 +6 CWE-190
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime Assuming the "rx-vlan-filter" feature is enabled on a net device, the 8021…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00206 Published 2025-07-28 Partial fix · 5.4.297, 5.10.241 +6
TI-2025-25507 CVE-2025-38166 · GHSA-4grq-496q-c892

bpf: fix ktls panic with sockmap

Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] ------------[ cut here ]------------ [ 2172.936999] kernel BUG at lib/iov_iter.c:629! ......

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00204 Published 2025-07-03 Partial fix · 6.1.142, 6.6.94 +3
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: espintcp: remove encap socket caching to avoid reference leak The current scheme for caching the encap socket can lead to reference leaks when we try to…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00205 Published 2025-07-03 Partial fix · 5.10.270, 5.15.221 +5
Priority LOW 34

In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi Lai reported an issue ([1]) where the following warning appears in kerne…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00236 Published 2025-07-10 Partial fix · 6.5, 6.6.160 +3
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() syzbot found a potential access to uninit-value in nf_flow_pppoe_proto() Blam…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00192 Published 2025-07-25 Partial fix · 5.15.189, 6.1.146 +5 CWE-908
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00223 Published 2025-07-25 Fixed in 5.4.296, 5.10.240 +7
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc Memory allocated for idxd is not freed if an error occurs during idxd_alloc().

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00197 Published 2025-06-18 Partial fix · 6.1, 6.1.140 +4 CWE-401
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When registering a queue fails after blk_mq_sysfs_register() is successful but the function…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00194 Published 2025-05-20 Partial fix · 6.1.168, 6.6.88 +3 CWE-401
TI-2025-16054 CVE-2025-22105 · GHSA-r4vm-3mc7-prgx

bonding: check xdp prog when set bond mode

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: bonding: check xdp prog when set bond mode Following operations can trigger a warning[1]: ip netns add ns1 ip netns exec ns1 ip link add bond0 type bond…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00204 Published 2025-04-16 Partial fix · 6.1.175, 6.6.119 +3
Priority LOW 22

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: fix typo in frequency notification The NAN notification is for 5745 MHz which corresponds to channel 149 and not 5475 which is not…

CVSS — EPSS 0.00174 Published 2026-02-04 Fixed in 6.18.6, 6.19
Priority LOW 22

In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend() There is a race condition between dm device suspend and table load that can lead to null pointer dere…

CVSS — EPSS 0.00227 Published 2025-11-12 Partial fix · 5.4.301, 5.10.246 +6