Red Hat Security Advisory

RHSA-2026:19225

kernel security update

Released 2026-05-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.5.3.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.5.3.el9_8, kernel-64k-devel-5.14.0-687.5.3.el9_8 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.5.3.el9_8, kernel-64k-5.14.0-687.5.3.el9_8, kernel-64k-core-5.14.0-687.5.3.el9_8 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.5.3.el9_8, libperf-5.14.0-687.5.3.el9_8
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.5.3.el9_8, kernel-rt-64k-5.14.0-687.5.3.el9_8, kernel-rt-64k-core-5.14.0-687.5.3.el9_8 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.5.3.el9_8, kernel-rt-core-5.14.0-687.5.3.el9_8, kernel-rt-debug-5.14.0-687.5.3.el9_8 +9

Fixes 4 records

TI-2026-23989 CVE-2026-31431 · GHSA-2274-3hgr-wxv6

crypto: algif_aead - Revert to operating out-of-place

CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.98114 Published 2026-04-22 Fixed in 5.10.254, 5.15.204 +6 CWE-669

TI-2026-31463 CVE-2026-43284 · GHSA-mmw8-mxmc-8w2r

xfrm: esp: avoid in-place decrypt on shared skb frags

HIGH 84

In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.94194 Published 2026-05-08 Fixed in 5.10.255, 5.15.205 +8 CWE-123

TI-2026-24234 CVE-2026-31677 · GHSA-25g2-2jj3-xvxx

crypto: af_alg - limit RX SG extraction by receive buffer budget

LOW 24

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - limit RX SG extraction by receive buffer budget Make af_alg_get_rsgl() limit each RX scatterlist extraction to the remaining receive bu…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00156 Published 2026-04-25 Partial fix · 6.1.191, 6.6.160 +4

TI-2026-18497 CVE-2026-23060 · GHSA-34wc-9m9j-23pc

crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec

LOW 24

In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec authencesn assumes an ESP/ESN-formatted AAD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00178 Published 2026-02-04 Partial fix · 5.10.249, 5.15.199 +5 CWE-476