Red Hat Security AdvisoryRHSA-2026:23329
kernel security update
Released 2026-06-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.20.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.20.1.el10_2, kernel-64k-devel-6.12.0-211.20.1.el10_2 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.20.1.el10_2, kernel-64k-6.12.0-211.20.1.el10_2, kernel-64k-core-6.12.0-211.20.1.el10_2 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.20.1.el10_2, libperf-6.12.0-211.20.1.el10_2
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.20.1.el10_2, kernel-rt-64k-6.12.0-211.20.1.el10_2, kernel-rt-64k-core-6.12.0-211.20.1.el10_2 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.20.1.el10_2, kernel-rt-core-6.12.0-211.20.1.el10_2, kernel-rt-debug-6.12.0-211.20.1.el10_2 +9
Fixes 7 records
Priority HIGH 69
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upca…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00413 · Published 2026-06-01 · Fixed in 5.10.258, 5.15.209 +6 CWE-20
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-suppl…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00345 · Published 2026-05-01 · Partial fix · 5.15.210, 6.1.176 +5 CWE-125
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix UAF in le_read_features_complete This fixes the following backtrace caused by hci_conn being freed before le_read_features_comp…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00219 · Published 2026-05-08 · Fixed in 6.19.12, 7.0 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtable hardware offload actions in IPv6 is: * ethernet mangl…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00178 · Published 2026-05-08 · Partial fix · 5.15.203, 6.1.168 +5 CWE-122
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns STATUS_STOPPED_ON_SYMLINK, smb2_check_message() returns success without…
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00387 · Published 2026-04-24 · Partial fix · 6.1, 6.1.175 +6 CWE-125
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al Check pde->proc_ops->proc_lseek directly may cause UAF in rmmod scenar…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00177 · Published 2025-08-22 · Partial fix · 6.1.148, 6.6.102 +4 CWE-416
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one use-after-free warning when running NBD_CMD_CONNECT and NBD_CLEAR_SOCK: nbd_genl_connect nbd_a…
CVSS — · EPSS 0.00198 · Published 2025-12-24 · Partial fix · 5.10.248, 5.15.198 +6
THREATIST.IORead the docs