Red Hat Security AdvisoryRHSA-2026:18587
kernel security update
Released 2026-05-19 · Red Hat rating Moderate · View on Red Hat →
Fixes 15 records
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet receives commands with metadata there is a continuous memory leak of kmalloc-128 slab or more precisely…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00429 · Published 2025-07-25 · Partial fix · 6.11, 6.12.37 +2 CWE-401
Priority LOW 39
Ceph is an open-source distributed storage platform providing object, block, and file storage.
CVSS 3.1HIGH 8.9· Adjacent network · Low privileges · No interaction · EPSS 0.00093 · Published 2026-08-27 · Partial fix · 19.2.6, 20.2.4 CWE-327
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurred when __mark_inode_dirty() get the bdi_writeback that was in t…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00314 · Published 2025-09-19 · Partial fix · 5.10.247, 5.15.192 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled count and the MAD header sizes.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0018 · Published 2026-03-18 · Partial fix · 5.10.252, 5.15.202 +6 CWE-190
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime Assuming the "rx-vlan-filter" feature is enabled on a net device, the 8021…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00206 · Published 2025-07-28 · Partial fix · 5.4.297, 5.10.241 +6
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] ------------[ cut here ]------------ [ 2172.936999] kernel BUG at lib/iov_iter.c:629! ......
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00204 · Published 2025-07-03 · Partial fix · 6.1.142, 6.6.94 +3
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: espintcp: remove encap socket caching to avoid reference leak The current scheme for caching the encap socket can lead to reference leaks when we try to…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00205 · Published 2025-07-03 · Partial fix · 5.10.270, 5.15.221 +5
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi Lai reported an issue ([1]) where the following warning appears in kerne…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00236 · Published 2025-07-10 · Partial fix · 6.5, 6.6.160 +3
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() syzbot found a potential access to uninit-value in nf_flow_pppoe_proto() Blam…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2025-07-25 · Partial fix · 5.15.189, 6.1.146 +5 CWE-908
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00223 · Published 2025-07-25 · Fixed in 5.4.296, 5.10.240 +7
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc Memory allocated for idxd is not freed if an error occurs during idxd_alloc().
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00197 · Published 2025-06-18 · Partial fix · 6.1, 6.1.140 +4 CWE-401
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When registering a queue fails after blk_mq_sysfs_register() is successful but the function…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00194 · Published 2025-05-20 · Partial fix · 6.1.168, 6.6.88 +3 CWE-401
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: bonding: check xdp prog when set bond mode Following operations can trigger a warning[1]: ip netns add ns1 ip netns exec ns1 ip link add bond0 type bond…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00204 · Published 2025-04-16 · Partial fix · 6.1.175, 6.6.119 +3
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: fix typo in frequency notification The NAN notification is for 5745 MHz which corresponds to channel 149 and not 5475 which is not…
CVSS — · EPSS 0.00174 · Published 2026-02-04 · Fixed in 6.18.6, 6.19
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend() There is a race condition between dm device suspend and table load that can lead to null pointer dere…
CVSS — · EPSS 0.00227 · Published 2025-11-12 · Partial fix · 5.4.301, 5.10.246 +6