Red Hat Security Advisory

RHSA-2026:19572

kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update

Released 2026-05-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v.8.8) kpatch-patch-4_18_0-477_107_1-1-5.el8_8, kpatch-patch-4_18_0-477_120_1-1-4.el8_8, kpatch-patch-4_18_0-477_130_1-1-2.el8_8 +2

Fixes 1 record

TI-2026-31463 CVE-2026-43284 · GHSA-mmw8-mxmc-8w2r

xfrm: esp: avoid in-place decrypt on shared skb frags

HIGH 84

In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.94194 Published 2026-05-08 Fixed in 5.10.255, 5.15.205 +8 CWE-123