Red Hat Security AdvisoryRHSA-2026:24343
kernel security update
Released 2026-06-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.77.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.77.1.el10_0, kernel-64k-devel-6.12.0-55.77.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.77.1.el10_0, kernel-64k-6.12.0-55.77.1.el10_0, kernel-64k-core-6.12.0-55.77.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.77.1.el10_0, libperf-6.12.0-55.77.1.el10_0
- Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.77.1.el10_0, kernel-rt-64k-6.12.0-55.77.1.el10_0, kernel-rt-64k-core-6.12.0-55.77.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.77.1.el10_0, kernel-rt-core-6.12.0-55.77.1.el10_0, kernel-rt-debug-6.12.0-55.77.1.el10_0 +11
Fixes 9 records
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00688 · Published 2026-05-01 · Partial fix · 5.10.253, 5.15.203 +6 CWE-121
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USB/IP client receives a RET_SUBMIT response, usbip_pack_ret_submit() unconditionall…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00311 · Published 2026-04-24 · Partial fix · 2.6.33, 2.6.34 +12 CWE-787
Priority MEDIUM 48
In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: In ip6_err_gen_icmpv6_unreach(), the skb is an outer IPv4 ICMP…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00255 · Published 2026-05-01 · Partial fix · 5.10.253, 5.15.203 +6 CWE-787
Priority MEDIUM 47
In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares i…
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.00485 · Published 2026-04-25 · Partial fix · 5.10.258, 5.15.209 +6 CWE-125
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF events brcmf_fweh_handle_if_event() validates the firmware-provided interface index before it touches drvr…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.0027 · Published 2026-05-06 · Partial fix · 5.10.258, 5.15.209 +6 CWE-129
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-suppl…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00345 · Published 2026-05-01 · Partial fix · 5.15.210, 6.1.176 +5 CWE-125
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call synchronize_rcu() after unregistering the hooks from error path, since a ho…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00165 · Published 2026-03-25 · Partial fix · 5.10.273, 5.15.224 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks As Paolo said earlier [1]: "Since the blamed commit below, classify can…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00137 · Published 2026-03-18 · Partial fix · 5.15.203, 6.1.167 +6 CWE-416
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one use-after-free warning when running NBD_CMD_CONNECT and NBD_CLEAR_SOCK: nbd_genl_connect nbd_a…
CVSS — · EPSS 0.00198 · Published 2025-12-24 · Partial fix · 5.10.248, 5.15.198 +6
THREATIST.IORead the docs