Red Hat Security AdvisoryRHSA-2026:21209
kernel security update
Released 2026-05-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.127.1.el9_4, libperf-5.14.0-427.127.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.127.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.127.1.el9_4, kernel-64k-devel-5.14.0-427.127.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.127.1.el9_4, kernel-5.14.0-427.127.1.el9_4, kernel-64k-5.14.0-427.127.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.127.1.el9_4, kernel-rt-core-5.14.0-427.127.1.el9_4, kernel-rt-debug-5.14.0-427.127.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.127.1.el9_4, kernel-rt-core-5.14.0-427.127.1.el9_4, kernel-rt-debug-5.14.0-427.127.1.el9_4 +11
Fixes 9 records
Priority MEDIUM 42
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex item In qla2xxx_process_purls_iocb(), an item is allocated via qla27xx_copy_multiple_pkt(), which internall…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0043 · Published 2025-12-24 · Fixed in 6.6.120, 6.12.63 +3
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00233 · Published 2025-04-03 · Partial fix · 5.10.236, 5.15.180 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original skb for the last slave (determined by bond_is_last_s…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00129 · Published 2026-04-13 · Partial fix · 5.10.273, 5.15.224 +7 CWE-362
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks As Paolo said earlier [1]: "Since the blamed commit below, classify can…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00137 · Published 2026-03-18 · Partial fix · 5.15.203, 6.1.167 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled count and the MAD header sizes.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0018 · Published 2026-03-18 · Partial fix · 5.10.252, 5.15.202 +6 CWE-190
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit The following setup can trigger a WARNING in htb_activate due to the condition: !…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00184 · Published 2025-09-11 · Partial fix · 5.4.297, 5.10.241 +6
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al Check pde->proc_ops->proc_lseek directly may cause UAF in rmmod scenar…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00177 · Published 2025-08-22 · Partial fix · 6.1.148, 6.6.102 +4 CWE-416
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one use-after-free warning when running NBD_CMD_CONNECT and NBD_CLEAR_SOCK: nbd_genl_connect nbd_a…
CVSS — · EPSS 0.00198 · Published 2025-12-24 · Partial fix · 5.10.248, 5.15.198 +6
Priority LOW 20
In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resize race A General Protection Fault occurs in write_page() during array resize: RIP: 0010:write_page+0x22b…
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00091 · Published 2026-05-06 · Partial fix · 5.10.252, 5.15.202 +6 CWE-362
THREATIST.IORead the docs