Red Hat Security Advisory

RHSA-2026:20130

kernel security update

Released 2026-05-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.192.1.el8_4, kernel-4.18.0-305.192.1.el8_4, kernel-abi-stablelists-4.18.0-305.192.1.el8_4 +14
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bpftool-4.18.0-305.192.1.el8_4, kernel-4.18.0-305.192.1.el8_4, kernel-abi-stablelists-4.18.0-305.192.1.el8_4 +14

Fixes 4 records

TI-2026-34021 CVE-2026-46300 · GHSA-47jg-vqrv-5f8v

Linux kernel skb coalescing drops shared-frag marker

CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.1613 Published 2026-05-23 Fixed in 5.10.257, 5.15.208 +6 CWE-456

TI-2026-34054 CVE-2026-46333 · GHSA-pm8f-4p6p-6x53

ptrace: slightly saner 'get_dumpable()' logic

HIGH 66

In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about the memory image of the task - the concept comes from w…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.04299 Published 2026-05-15 Partial fix · 3.17, 4.5 +10 CWE-269

TI-2026-31680 CVE-2026-43503 · GHSA-494p-q444-9xf7

net: skbuff: propagate shared-frag marker through frag-transfer helpers

MEDIUM 44

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail to propaga…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01987 Published 2026-05-23 Fixed in 5.10.257, 5.15.208 +6 CWE-691

TI-2026-24090 CVE-2026-31532 · GHSA-7w6x-pfmg-76xx

can: raw: fix ro->uniq use-after-free in raw_rcv()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is d…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2026-04-23 Fixed in 5.10.258, 5.15.209 +7 CWE-416